Hybrid Cyber GRC Lead - ISO 27001 & OT Security

Decipher Bureau; Brisbane; Híbrido; AUD 185.000 - 195.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Extra paid parental leave

Fuel discount for you and your family

Salary packaging and discountedPrivate

Tenure bonuses, travel and employee |

Descripción de la vacante

Decipher Bureau is seeking a Cyber GRC Lead to own the ISO 27001 ISMS and drive governance across IT and OT. You will report to the Head of Information Security within a SOCI-regulated environment and influence both internal teams and external partners.

The role emphasises architectural input, risk management, and a broad program leadership approach. Based near Brisbane with a hybrid schedule, the role offers a strong impact across the business and growth opportunities.

Formación

• 5+ years in information security governance, risk and compliance, ideally in critical infrastructure, energy, utilities or financial services
• Hands-on experience operating an ISO 27001 ISMS, including internal audit, management review and the SoA
• Experience implementing or measuring against Essential Eight, CIS Controls, NIST, PCI-DSS or IEC 62443
• Risk register management and reporting to management or board level
• Enough technical depth to contribute in architecture reviews and change advisory
• Certs like CISSP, CISM, CRISC or CISA, with ISO 27001 Lead Implementer or Lead Auditor highly regarded
• Full working rights in Australia, No sponsorship.

Responsabilidades

• Running the ISO 27001 ISMS: internal audit schedule, management reviews, SoA, policy suite and security committee
• Map ISMS to Essential Eight and CIS Controls for IT, IEC 62443 for OT
• Own the technology risk register, risk assessments, remediation and exceptions
• Support SOCI and CIRMP compliance, OAIC obligations with Legal/Procurement
• Oversee vulnerability management across IT and OT, including remediation SLAs
• Run third-party and supplier risk assessments against critical suppliers
• Hold MSSP, pentesters and security partners to measurable outcomes
• Help build OT security governance with OT team
• Support awareness training, phishing simulations, tabletop exercises and post-incident reviews

Conocimientos

GRC foundations

Information security

Architecture reviews

Risk management

Vendor risk

Regulatory compliance

Educación

CISSP

CISM

CRISC

CISA

ISO 27001 Lead Implementer

ISO 27001 Lead Auditor

Herramientas

Entra

Purview

Defender

Tenable

Qualys

Rapid7

Descripción del empleo

Decipher Bureau is seeking a Cyber GRC Lead to own the ISO 27001 ISMS and drive governance across IT and OT. You will report to the Head of Information Security within a SOCI-regulated environment and influence both internal teams and external partners.

The role emphasises architectural input, risk management, and a broad program leadership approach. Based near Brisbane with a hybrid schedule, the role offers a strong impact across the business and growth opportunities.