Senior GRC & Security Analyst (ISO 27001)

SEC Victoria; Melbourne; Hybrid; AUD 130,000 - 180,000; Full time

Job summary

SEC Victoria is seeking a senior cyber security governance, risk and compliance professional to strengthen security controls and regulatory assurance across the organisation. You will own ISO/IEC 27001-aligned controls, risk assessments and remediation, and you’ll partner with technology and business leaders to translate complex security issues into actionable actions.

In this hybrid Melbourne role, you’ll drive risk governance, engage stakeholders, and balance security outcomes with commercial

Qualifications

• Demonstrated expertise in cyber security governance, risk and compliance, including hands-on experience with ISO/IEC 27001-aligned controls frameworks, risk assessments, assurance activities and remediation management.
• Proven ability to manage technology or cyber risks throughout their lifecycle, leveraging GRC platforms, facilitating stakeholder discussions and providing clear, actionable reporting to business and technology leaders.
• Experience building and/or administering a controls library, including conducting control assessments, managing evidence, identifying gaps and driving remediation activities to improve security effectiveness and compliance outcomes.

Responsibilities

• Lead security controls & compliance assurance, ensuring controls remain effective, aligned to ISO/IEC 27001 and key regulatory obligations.
• Lead technology risk governance & advisory, facilitating risk discussions, maintaining the technology risk landscape and translating complex security issues into clear business decisions.
• Balance governance with commercial outcomes by engaging stakeholders across projects and transformation initiatives.

Skills

Cyber security governance

Risk & compliance

ISO 27001 controls

Stakeholder management

Regulatory reporting

Tools

GRC platforms

Job description

SEC Victoria is seeking a senior cyber security governance, risk and compliance professional to strengthen security controls and regulatory assurance across the organisation. You will own ISO/IEC 27001-aligned controls, risk assessments and remediation, and you’ll partner with technology and business leaders to translate complex security issues into actionable actions.

In this hybrid Melbourne role, you’ll drive risk governance, engage stakeholders, and balance security outcomes with commercial