GRC Program Lead – Data Centre ISO 27001 (APAC)

Mission Critical Recruiting; Sydney; On-site; AUD 180,000 - 280,000; Full time

Benefits offered by this job

Greenfield project

Leadership role

APAC exposure

Job summary

Mission Critical Recruiting – Sydney NSW is seeking a Governance, Risk & Compliance Program Manager to lead the GRC function for a hyperscale data centre operator. You will own governance across OT and ICT, drive ISO 27001 alignment, and shape the upcoming GRC platform and control library.

The role is a greenfield build with significant APAC exposure, a clear team plan, and the chance to set the strategy, operating model, and vendor expectations for critical infrastructure.

Qualifications

• Significant GRC or technology risk experience in regulated environments.
• Hands-on ISO 27001 implementation and certification.
• Knowledge of Australian requirements (SOCI Act, Essential Eight).
• Experience mapping and reporting controls on a GRC platform.

Responsibilities

• Set the GRC strategy, roadmap and operating model for data centre OT and ICT.
• Lead ISO 27001 alignment and certification, plus country-specific controls.
• Select and implement a GRC platform, and build the control library, testing and reporting on it.
• Own the OT and ICT risk register, risk acceptance and remediation tracking.
• Lead internal and external audits and customer assurance requests.
• Set vendor and third-party security expectations, including remote access.
• Report risk posture and control maturity to the executive team.
• Lead an assistant manager and direct outsourced specialists.

Skills

GRC experience

ISO 27001

Regulatory knowledge (Australia)

Risk management

Audits

Stakeholder communication

Tools

ServiceNow IRM

RSA Archer

OneTrust

Job description

Mission Critical Recruiting – Sydney NSW is seeking a Governance, Risk & Compliance Program Manager to lead the GRC function for a hyperscale data centre operator. You will own governance across OT and ICT, drive ISO 27001 alignment, and shape the upcoming GRC platform and control library.

The role is a greenfield build with significant APAC exposure, a clear team plan, and the chance to set the strategy, operating model, and vendor expectations for critical infrastructure.