Senior GRC Architect — Governance, Risk & Compliance

E2 Cyber; Brisbane; Presencial; AUD 120.000 - 180.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Competitive salary package

Collaborative team

Career development

Diversity & inclusion

Descripción de la vacante

e2Cyber is seeking an experienced Senior GRC Specialist to join its cyber security team in Brisbane. This role spans governance, risk, compliance, security assurance, and stakeholder engagement within a complex enterprise environment.

You will maintain and enhance the ISMS, lead risk assessments, support audits, and ensure ongoing regulatory alignment with ISO 27001, ASD ISM, PCI-DSS, and other standards, while collaborating with both technical and non-technical stakeholders.

Formación

• Proven experience in Cyber Security GRC.
• Strong knowledge of ISO 27001, ISO 31000, ASD ISM, Essential Eight.
• Experience supporting security audits and compliance programs.
• Ability to engage with technical and non-technical stakeholders.
• Experience conducting supplier and third-party security assessments.
• Strong written communication and reporting skills.
• Independent worker with strategic initiative.
• Desirable certifications: CISA, CISM, CRISC, CISSP, ISO 27001 Lead Auditor.

Responsabilidades

• Lead maintenance and continual improvement of ISMS.
• Conduct cyber security risk assessments across systems, projects, and third-party suppliers.
• Manage cyber risk registers, treatment plans, and governance reporting.
• Coordinate internal and external audits, including evidence gathering and remediation.
• Support compliance initiatives across ISO 27001, Essential Eight, ASD ISM, PCI-DSS.
• Deliver cyber security awareness programs and phishing simulations.
• Prepare reports, metrics, and presentations for leadership and governance forums.
• Assist with policy development, standards management, and security governance activities.

Conocimientos

Governance

Risk management

Compliance

Audits

Stakeholder comms

Supplier assessments

Descripción del empleo

e2Cyber is seeking an experienced Senior GRC Specialist to join a high-performing cyber security team. This role is ideal for a cyber professional who enjoys working across governance, risk, compliance, security assurance, and stakeholder engagement within a complex enterprise environment.
You will play a key role in maintaining and enhancing cyber security governance frameworks, managing risk activities, supporting audits, and ensuring ongoing compliance with industry standards and regulatory requirements.
Key Responsibilities

• Lead the maintenance and continual improvement of the organisation's Information Security Management System (ISMS).
• Conduct cyber security risk assessments across systems, projects, and third-party suppliers.
• Manage cyber risk registers, treatment plans, and governance reporting.
• Coordinate internal and external audits, including evidence gathering, control reviews, and remediation activities.
• Support compliance initiatives across frameworks including ISO 27001, Essential Eight, ASD ISM, and PCI-DSS.
• Deliver cyber security awareness programs and phishing simulation activities.
• Prepare reports, metrics, and presentations for leadership and governance forums.
• Assist with policy development, standards management, and security governance activities.

About You

• Proven experience in Cyber Security Governance, Risk & Compliance (GRC).
• Strong understanding of ISO 27001, ISO 31000, ASD ISM, Essential Eight, and cyber risk management principles.
• Experience supporting or leading security audits and compliance programs.
• Ability to engage with both technical and non-technical stakeholders.
• Experience conducting supplier and third-party security assessments.
• Strong written communication and reporting skills.
• Ability to work independently and contribute to strategic cyber security initiatives.

Desirable Certifications

• CISA
• CISM
• CRISC
• CISSP
• ISO 27001 Lead Auditor

What's on Offer

• Opportunity to work within a mature and evolving cyber security environment.
• Exposure to enterprise-wide cyber security initiatives.
• Supportive and collaborative team culture.
• Long-term career development opportunities.
• Competitive salary package and benefits.

Due to the volume of applications expected, only shortlisted candidates will be contacted.
For a confidential discussion, please contact the team at e2Cyber.


We are an inclusive employer committed to fostering a diverse and accessible workplace. We encourage applications from Aboriginal and Torres Strait Islander peoples, people with disabilities, LGBTQIA+ individuals, people of all ages, and those from culturally and linguistically diverse backgrounds.

#SCR-ben-rogalsky