GRC Manager - Systems Integrator

Hamilton Barnes; Australia; Remote; AUD 160,000 - 200,000; Full time

Job summary

Hamilton Barnes in Australia is seeking a GRC (Compliance) Manager to own the security and compliance programmes for a SaaS business.

You will manage the full lifecycle, lead external audits and strengthen governance, privacy, and risk controls across teams.

Experience with ISO 27001, IRAP, ISM or Essential Eight, and a background in AI governance will be highly regarded.

Qualifications

• Proven experience owning an ISO 27001 programme through external audits.
• Strong experience in GRC, risk management and compliance.
• Experience managing audit findings, policies and risk registers.
• Exposure to IRAP, ISM, DISP, Essential Eight or ISO 42001.
• Strong communication skills and ability to work independently.
• Experience in a SaaS or technology business, AI governance or customer assurance is valued.

Responsibilities

• Own and maintain ISO 27001 and ISO 42001 management systems.
• Manage certification programmes, external audits, and corrective actions.
• Maintain risk registers, policies, controls, and audit evidence.
• Oversee third‑party risk assessments and compliance reporting.
• Support customer security questionnaires, RFPs, and assurance requests.
• Collaborate with security, engineering, IT, product, and legal teams.
• Help strengthen AI governance and compliance processes.

Skills

ISO 27001

GRC

Audit management

Risk registers

IRAP/ISM/Essential Eight

AI governance

Communication skills

Job description

Ready to take the next step in your career?

Join a sovereign governance, risk, and compliance infrastructure provider built for organisations that can’t afford to get it wrong, serving government, defence, and critical infrastructure operators. Where cloud-first approaches fall short, it deploys in sovereign cloud, on-premises, or fully air-gapped environments, bringing risk, compliance, and assurance together as one operating model powered by AI.

An exciting opportunity has arisen for a GRC (Compliance) Manager to take ownership of the security and compliance programmes at an Australian SaaS company. The ideal candidate will own the full compliance lifecycle in a hands-on role, managing audits and building strong governance processes in a growing technology business.

Responsibilities

• Own and maintain the company's ISO 27001 and ISO 42001 management systems.
• Manage certification programmes, external audits and corrective actions.
• Maintain risk registers, policies, controls and audit evidence.
• Oversee third-party risk assessments and compliance reporting.
• Support customer security questionnaires, RFPs and assurance requests.
• Work closely with teams across security, engineering, IT, product and legal.
• Help strengthen AI governance and compliance processes.

Skills/Must Have

• Proven experience owning an ISO 27001 programme through external audits.
• Strong experience in GRC, risk management and compliance.
• Experience managing audit findings, policies and risk registers.
• Exposure to frameworks such as IRAP, ISM, DISP, Essential Eight or ISO 42001.
• Strong communication skills and the ability to work independently.
• Experience in a SaaS or technology business, AI governance or customer assurance would be highly regarded.

Location

• Australia (remote)

Salary

• $160,000–$200,000 + super, depending on experience.