ISO 27001 GRC Lead — Cyber Security Governance

City Facilities Management Ltd.; Victoria; Hybrid; AUD 150,000 - 190,000; Full time

Job summary

City Facilities Management Ltd. seeks a seasoned Cyber Governance, Risk & Compliance Lead to drive ISO 27001 certification and establish a robust ISMS across the organisation.

You will lead governance, risk and compliance programs and partner with executive leaders to strengthen cyber controls and assurance. Reporting to the General Manager, Digital & Security, you will develop security policies, coordinate audits, and foster continuous improvement in cyber risk management and governance across

Qualifications

• Bachelor degree in Information Security, Risk Management or related discipline.
• Minimum 5 years' experience in Cyber Security Governance, Risk & Compliance or Information Security Management.
• Demonstrated experience leading or supporting ISO/IEC 27001 certification programs.
• Hands-on experience establishing and maintaining an ISMS.
• Strong understanding of cyber risk management frameworks and methodologies.

Responsibilities

• Lead the end-to-end ISO/IEC 27001 certification program.
• Coordinate gap assessments, risk assessments and Statement of Applicability development.
• Manage certification readiness activities, internal audits and external certification audits.
• Maintain certification roadmaps, evidence repositories and readiness reporting.
• Drive accountability across information asset owners, risk owners and control owners.
• Develop and maintain the Information Security Management System and related policies.

Skills

Governance & Compliance

Risk management

Stakeholder engagement

ISO 27001 knowledge

ISMS management

Education

Bachelor's degree in Information Security, Risk Management or related discipline

Tools

ISO/IEC 27001 Lead Implementer

Lead Auditor

CISSP

CRISC

CISA

Job description

City Facilities Management Ltd. seeks a seasoned Cyber Governance, Risk & Compliance Lead to drive ISO 27001 certification and establish a robust ISMS across the organisation.

You will lead governance, risk and compliance programs and partner with executive leaders to strengthen cyber controls and assurance. Reporting to the General Manager, Digital & Security, you will develop security policies, coordinate audits, and foster continuous improvement in cyber risk management and governance across