Senior GRC & ISMS Lead - ISO 27001 & Assurance

Luxuryescapes; Sydney; On-site; AUD 140,000 - 210,000; Full time

Benefits offered by this job

Excellent remuneration

20% holiday discount

Breakfast and lunch provided

Health and wellbeing programs

Annual Hackathons

Birthday leave

Collaborative team

Job summary

Luxury Escapes in Sydney is seeking a Principal ISMS & Assurance lead to own the ISMS and certification programme and drive ongoing surveillance and recertification.

The role includes maintaining scope, policies, and evidence; coordinating Stage 1/2 audits, risk management, third-party security, and incident coordination, with collaboration across IT, Engineering, and DPO to ensure controls and compliance.

Qualifications

• Experience running a management system or assurance programme.
• Practical information security risk management skills and ownership across teams.
• Working knowledge of PCI DSS and GDPR or comparable privacy obligations.
• Experience with third‑party security risk and customer assurance requests.
• Strong planning, stakeholder management and communication skills.

Responsibilities

• Maintain the ISMS scope, Statement of Applicability, policies and supporting evidence.
• Support Stage 1 and Stage 2 ISO 27001 audits; coordinate internal and external audits, findings and corrective actions.
• Lead management reviews and report ISMS performance to the ISMS Governance Council.
• Own the risk method, register and treatment tracking; facilitate assessments with risk owners.
• Coordinate recurring assurance, including access reviews, control testing and penetration tests.
• Monitor control performance and communicate key exposures, findings and remediation progress.
• Oversee compliance, systems and third parties.
• Coordinate incidents, awareness and customer assurance; maintain incident response plan and run training.

Skills

ISMS governance

Risk management

Audits

Policy management

Stakeholder management

Vendor risk

Tools

EDR

SIEM

AWS

Cloud security tools

Job description

Luxury Escapes in Sydney is seeking a Principal ISMS & Assurance lead to own the ISMS and certification programme and drive ongoing surveillance and recertification.

The role includes maintaining scope, policies, and evidence; coordinating Stage 1/2 audits, risk management, third-party security, and incident coordination, with collaboration across IT, Engineering, and DPO to ensure controls and compliance.