Cyber Governance Risk & Compliance Lead

Are you an experienced Cyber Governance, Risk & Compliance professional ready to lead a transformational security program?We are seeking a Cyber Governance Risk & Compliance (GRC) Lead to drive our ISO/IEC 27001 certification program and establish a best-practice Information Security Management System (ISMS). This influential role offers the opportunity to shape cyber governance across the business and play a critical role in strengthening our overall security posture.Why Join Us?Lead a high-profile ISO 27001 certification programShape cyber governance across a national organisationPartner with executive leaders and key business stakeholdersDrive continuous improvement in cyber risk, compliance and assuranceJoin a collaborative and supportive technology teamWork on strategic initiatives that directly influence organisational resilienceThe OpportunityReporting to the General Manager - Infrastructure & Security, you will be responsible for leading the implementation, operation and continual improvement of the organisation's Information Security Management System (ISMS).You will work closely with stakeholders across Technology, Quality and broader business functions to ensure security controls are effectively implemented, monitored and aligned to organisational, regulatory and contractual requirements.Key ResponsibilitiesISO 27001 Certification & ISMS LeadershipLead the end-to-end ISO/IEC 27001 certification programCoordinate gap assessments, risk assessments and Statement of Applicability developmentManage certification readiness activities, internal audits and external certification auditsMaintain certification roadmaps, evidence repositories and readiness reportingDrive accountability across information asset owners, risk owners and control ownersGovernance, Risk & ComplianceEstablish, maintain and continuously improve the Information Security Management SystemDevelop and review security policies, standards and proceduresEnsure alignment with ISO 27001, privacy obligations and contractual requirementsMaintain the cyber risk register and oversee risk treatment activitiesFacilitate cyber risk assessments across systems, projects and business processesThird-Party Risk & AssuranceManage third-party and supply chain cyber risk programsConduct cyber security due diligence and ongoing vendor assurance activitiesCoordinate responses to customer, auditor and insurer security assessmentsMonitor remediation activities and control effectiveness across suppliersReporting & Continuous ImprovementDevelop cyber maturity metrics and security performance reportingReport on security risks, audit outcomes, control effectiveness and certification readinessDrive corrective actions, audit remediation and continuous improvement initiativesPresent meaningful insights and recommendations to governance forums and senior leadershipAbout YouTo be successful in this role, you will bring:EssentialBachelor's degree in Information Security, Risk Management or a related disciplineMinimum 5 years' experience in Cyber Security Governance, Risk & Compliance or Information Security ManagementDemonstrated experience leading or supporting ISO/IEC 27001 certification programsHands-on experience establishing and maintaining an ISMSStrong understanding of cyber risk management frameworks and methodologiesExperience maintaining risk registers and coordinating risk treatment plansExcellent stakeholder engagement, communication and influencing skillsDesirableISO/IEC 27001 Lead Implementer and/or Lead Auditor certificationCISSP, CRISC, CISA or similar industry-recognised certificationsExperience with NIST Cyber Security Framework, Essential Eight and related standardsKnowledge of privacy, data governance and third-party risk management practicesWhat Success Looks LikeYou will successfully deliver ISO 27001 certification, establish a sustainable governance framework, improve cyber risk visibility across the organisation and strengthen assurance capabilities through effective governance, reporting and stakeholder engagement.Apply NowIf you're passionate about cyber governance and want to lead a business-critical security and compliance program, we'd love to hear from you.Join us and help strengthen the future of cyber security, governance and risk management across our organisation.