GRC & ISMS Specialist — ISO 27001 / IS18 (Contract)

Decipher Bureau; Brisbane; On-site; AUD 192,000 - 251,000; Full time

Job summary

Decipher Bureau in Brisbane is recruiting a GRC Technical Advisor for a 3-month contract with a Queensland Government department. The role focuses on strengthening information security governance, reviewing ISMS controls, and driving remediation across IS18 and ISO 27001 alignment.

You will work with internal stakeholders to conduct risk assessments, update policies, maintain risk registers, and deliver practical recommendations to raise the department's security maturity and compliance posture.

Qualifications

• Experience in a Cybersecurity GRC role.
• Hands-on ISMS remediation experience.
• Knowledge of IS18 policy.
• Understanding of ISO 27001 and implementation.
• Experience conducting risk assessments.
• Experience supporting audits and corrective actions.
• Strong governance and risk treatment knowledge.

Responsibilities

• Review ISMS for gaps and improvements.
• Drive remediation and address audit findings.
• Conduct cybersecurity risk assessments across assets.
• Assess controls against IS18 and ISO 27001 requirements.
• Develop remediation plans and risk treatment strategies.
• Review/update information security policies and ISMS docs.
• Support ongoing ISMS maintenance and improvements.
• Maintain risk registers and compliance reporting.
• Provide technical GRC advice to improve governance.
• Collaborate with technical teams and governance functions.
• Prepare reports outlining risks and actions.
• Support enhancements to cybersecurity maturity and compliance.

Skills

GRC

ISMS

IS18

ISO 27001

Risk assessments

Audit support

Stakeholder engagement

Delivery focus

Job description

Decipher Bureau in Brisbane is recruiting a GRC Technical Advisor for a 3-month contract with a Queensland Government department. The role focuses on strengthening information security governance, reviewing ISMS controls, and driving remediation across IS18 and ISO 27001 alignment.

You will work with internal stakeholders to conduct risk assessments, update policies, maintain risk registers, and deliver practical recommendations to raise the department's security maturity and compliance posture.