Cyber Security GRC - Advert
Posted 5
views
Summary
Cyber Security GRC/Risk Specialist role (contract & permanent) in Sydney, hybrid, placed by IBC Recruitment for client organisations. Day to day: cyber risk assessments, security policy/standards work, control and assurance assessments, third-party risk, audit support, and compliance with frameworks like ISO 27001, NIST and Essential Eight.
Cyber Security GRC / Risk Specialist
Contract & Permanent Opportunities
Sydney | Hybrid
Cyber Security | GRC | Risk | Assurance
We are seeking experienced Cyber Security GRC and Risk professionals to connect with leading organisations across Sydney. This is an opportunity for professionals with experience across cyber governance, security risk, assurance, compliance and information security frameworks.
You will play a key role in supporting cyber security governance and risk management, working closely with technology, security and business stakeholders to assess risk and strengthen organisational security capabilities.
Key Responsibilities:
Contract & Permanent Opportunities
Sydney | Hybrid
Cyber Security | GRC | Risk | Assurance
We are seeking experienced Cyber Security GRC and Risk professionals to connect with leading organisations across Sydney. This is an opportunity for professionals with experience across cyber governance, security risk, assurance, compliance and information security frameworks.
You will play a key role in supporting cyber security governance and risk management, working closely with technology, security and business stakeholders to assess risk and strengthen organisational security capabilities.
Key Responsibilities:
- Conduct cyber security risk assessments across technology, projects and business initiatives
- Develop and maintain security policies, standards, procedures and controls
- Support compliance with frameworks including ISO 27001, NIST and Essential Eight
- Undertake security assurance and control assessments
- Identify, assess and communicate information security risks
- Support third-party and supplier cyber security risk assessments
- Prepare risk reporting and provide clear recommendations to senior stakeholders
- Work with technical teams to assess the effectiveness of security controls
- Support internal and external audit and compliance activities
- Contribute to continuous improvement across cyber security governance and risk practices
- 3+ years’ experience within Cyber Security, Information Security, GRC, Risk or Assurance
- Strong understanding of cyber security governance, risk and control frameworks
- Experience with frameworks such as ISO 27001, NIST, Essential Eight or similar
- Proven ability to assess and communicate technical and cyber security risks
- Strong stakeholder engagement skills across technology and business teams
- Excellent written and verbal communication skills
- Relevant cyber security, risk or information security certifications are advantageous