This is a tier one organisation with a good culture of high quality work in an industry that requires a lot from their security team.

Your roles and responsibilities include:

• Manage information security GRC activities across the region and service provisioning, ensuring coordination with stakeholders.
• Be a trusted cyber security advisor to various business units and key stakeholders.
• Ensure security principles are effectively applied throughout service life cycles, including those managed by third parties.
• Assess security controls internally, with partners, and external providers.
• Implement and enforce compliance with security standards and regulations.
• Define contractual security provisions for third-party engagements.
• Manage security risks, address policy deviations, and develop mitigation strategies.
• Support the annual compliance reporting process for the region.

About you:

• 5+ years experience in a similar cyber GRC role
• Experience with cyber security ISMS management, 3rd party risk management, etc.
• Ability to advise technical teams on their GRC requirements and how they can go about meeting them
• Previous experience working in large, complex organisations with high regulatory requirements
• Australian citizen or PR, no visa sponsorship available

To learn more please apply online or reach out to [email protected] to discuss further. Applications close 16th of May.