Senior Cybersecurity GRC Lead - ISO27001 & SOC2

WebHosting; Brisbane; On-site; AUD 120,000 - 180,000; Full time

Job summary

Megaport in Brisbane is looking for an experienced Cyber Security GRC professional to lead certification programs and drive ISO27001:2022 and SOC 2 Type 2 compliance across our global teams.

You will mentor security analysts, prepare investigations and audit documentation, and coordinate responses to customer security questionnaires, leveraging Jira, Confluence and OneTrust to maintain rigorous governance.

Qualifications

• 3–5 years of experience in a Cyber Security GRC role.
• Experience leading ISO27001 and SOC 2 Type 2 certification programs, including audits.
• Ability to interpret legal/regulatory documentation and coordinate with legal counsel.
• Strong research, analytical and organisational skills with attention to detail.
• Intermediate to advanced English (B2 or higher) for international communications.
• Comfortable in a fast-paced, global environment and collaborating across regions.
• Experience with compliance, monitoring, or workflow tools (Jira, Confluence, Vanta, OneTrust).
• Familiarity with HIPAA, NIS2, DORA, APRA CPS 230/234.

Responsibilities

• Lead ISO27001:2022 and SOC 2 Type 2 certification activities.
• Mentor cyber security analysts and provide support as required.
• Prepare reports and documentation for security investigations, regulatory compliance, and internal processes.
• Assist with customer security assurance responses to questionnaires.

Skills

Cyber Security

GRC

Audit coordination

Regulatory knowledge

English proficiency

Tools

Jira

Confluence

Vanta

OneTrust

Job description

Megaport in Brisbane is looking for an experienced Cyber Security GRC professional to lead certification programs and drive ISO27001:2022 and SOC 2 Type 2 compliance across our global teams.

You will mentor security analysts, prepare investigations and audit documentation, and coordinate responses to customer security questionnaires, leveraging Jira, Confluence and OneTrust to maintain rigorous governance.