GRC Security Specialist

Emmbr; City of Melbourne; Hybrid; AUD 100,000 - 130,000; Full time

Job summary

A global distribution organisation is seeking a GRC Specialist to enhance governance, risk, and compliance capabilities within their cybersecurity function. This full-time role in Melbourne requires 4-5 years of GRC experience and strong policy development skills. The successful candidate will manage compliance activities and work collaboratively while also functioning autonomously. Relevant certifications like CISM or CISSP are highly desirable. This is an excellent opportunity within a rapidly growing team.

Qualifications

• 4–5+ years of experience in a dedicated GRC-focused cyber or information security role.
• Strong experience in policy development and writing within complex organisations.
• Solid understanding of governance frameworks, risk management, and compliance obligations.

Responsibilities

• Own and develop security policies, standards, and procedures.
• Manage and mature risk management, governance, and compliance frameworks.
• Support audits, assessments, regulatory requirements, and ongoing compliance activities.

Skills

Governance frameworks

Risk management

Compliance obligations

Policy development

Autonomous working

Education

Relevant certifications (CISM, CRISC, CISSP, ISO 27001)

Job description

Cybersecurity Talent Scout @Emmbr – I connect Top Cybersecurity professionals with leading companies

Full time, permanent and hybrid – Melbourne

We are recruiting for a GRC Specialist to join the cyber security function of a global, market‑leading distribution organisation.

This is an opportunity to work within a large, complex enterprise that has significantly invested in cyber security, growing its team from one to more than 35 professionals in just four years, with further expansion planned.

You will report into an experienced manager and play a key role in strengthening governance, risk, and compliance capabilities across the organisation.

Responsibilities

• Own and develop security policies, standards, and procedures, ensuring they are clear, practical, and fit for purpose
• Lead and support GRC initiatives across a large, complex enterprise environment
• Manage and mature risk management, governance, and compliance frameworks
• Work independently while collaborating with cyber, technology, and business stakeholders
• Support audits, assessments, regulatory requirements, and ongoing compliance activities

About You

• 4–5+ years' experience in a dedicated GRC-focused cyber or information security role
• Strong experience in policy development and writing within complex organisations
• Solid understanding of governance frameworks, risk management, and compliance obligations
• Comfortable working autonomously and managing competing priorities
• Relevant certifications (e.g. CISM, CRISC, CISSP, ISO 27001) are highly desirable

Seniority level

Mid‑Senior level

Employment type

Full-time

Job function

Information Technology

Industry

Technology, Information and Internet

Apply now :)