GRC Engineer
Posted 2
views
Summary
An in-house GRC Engineer at Breville Group in Alexandria, Australia, building automated compliance controls across cybersecurity, privacy, data and AI governance. Day to day: control automation and testing, evidence collection, risk and remediation management, and audit readiness aligned to NIST CSF, NIST Privacy, NIST AI RMF and PCI DSS.
About the role We are seeking an experienced GRC and Compliance Engineering professional to strengthen BRG’s cybersecurity, privacy, data and AI governance capabilities. This role will develop automated controls, manage information protection, assurance and risk activities, and drive compliance and remediation across the technology environment. Key responsibilities include: Build and continuously improve BRG’s GRC and compliance engineering capability across cybersecurity, privacy, data and AI governance. Translate policies and frameworks into measurable, automated controls, assurance and continuous compliance monitoring. Improve compliance efficiency through automation, evidence collection, control testing and monitoring, risk reporting and streamlined assurance processes. Manage cybersecurity and compliance risk, third-party risk, exceptions, findings and remediation. Maintain control libraries aligned with NIST CSF, NIST Privacy Framework, NIST AI RMF, PCI DSS and applicable requirements. Coordinate cybersecurity, privacy, AI, PCI and financial audits, certification readiness and external assurance. Oversee penetration testing, vulnerability assessments, security reviews and remediation through verified closure. Engineer and assure information protection and data governance, including classification, sensitivity labelling, DLP, retention and lifecycle management. Embed security, privacy, data protection and AI governance into BRG initiatives and solutions. Enforce compliance by escalating non-conformance, setting remediation timelines and providing evidence-based assurance.
