Cyber GRC & IT Resilience Team Lead
Hybrid Melbourne role (via recruiter Decipher Bureau) at a large ASX-listed organisation: operationalise a greenfield IT disaster recovery program as ITDR Coordinator, act as 2IC to the Head of IT Security, and lead three GRC analysts across third-party risk, audits and ISO 27001/NIST CSF. Salary $190,000 + super.
- Compensation
- A$190K / yr
- Location
- Melbourne VIC
- Work setup
- Onsite
- Seniority
- Lead
- Employment
- Not specified
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- Australian work rights, current driver's licence and National Police Check
- Proven experience developing and maintaining IT disaster recovery plans, and establishing DR within an organisation
- Solid understanding of RTOs, RPOs and BIAs, plus system tiering and dependency mapping
- Strong GRC background across frameworks such as NIST, ISO 27001 or PCI DSS
- Experience coaching or leading GRC analysts
- Confidence presenting to senior stakeholders in a fast-paced environment
Nice to have
- Retail, healthcare, logistics or critical infrastructure experience
- Certifications such as CBCI, CBCP, ISO 22301, CISA, CISM, CRISC or ISO 27001 LA/LI
- Exposure to SAP and large ERP environments
Full description
Salary: $190,000 + Super
We're partnering with a large ASX-listed organisation to hire a Cyber GRC & IT Resilience Team Lead. This is a brand-new role and a genuine greenfield opportunity.
The ITDR Standard and templates are already written. What's needed now is
someone to drive them forward and turn them into a working program across Technology.
This role isn't for a GRC all-rounder who has picked up some DR along the way. We're looking for a GRC professional with proven experience establishing DR within an organisation.
You'll act as 2IC to the Head of IT Security and as technical lead to three GRC analysts working across third-party risk, maturity assessments and audit.
What's on offer
- High visibility, with real backing from senior leadership
- A strong budget, including training and certification support
- A supportive, collaborative cyber team
- A largely greenfield DR program: the Standard is written, you make it work
What you'll be doing
- Act as IT Disaster Recovery Coordinator and operationalise the ITDR Standard across Technology
- Coordinate technology teams to build and maintain recovery plans, RTOs/RPOs, dependencies and recovery sequencing
- Prioritise the systems in scope for audit, then tier critical systems.
- Establish and run the DR testing and exercise program, closing the gaps it surfaces
- Work with the enterprise Business Continuity team so ITDR aligns with BIA outcomes
- Track and report DR risks, gaps and audit remediation to senior leadership
- Lead three GRC analysts across third-party risk, risk registers, maturity assessments, ISO 27001 and NIST CSF
- Report on KPIs and KRIs across ITDR and Cyber GRC
What you'll bringMust-have:
- Proven experience developing and maintaining IT disaster recovery plans, and establishing DR within an organisation
- Solid understanding of RTOs, RPOs and BIAs, plus system tiering and dependency mapping
- Strong GRC background across frameworks such as NIST, ISO 27001 or PCI DSS
- Experience coaching or leading GRC analysts
- Confidence presenting to senior stakeholders in a fast-paced environment
Desirable:
- Retail, healthcare, logistics or critical infrastructure experience
- Certifications such as CBCI, CBCP, ISO 22301, CISA, CISM, CRISC or ISO 27001 LA/LI
- Exposure to SAP and large ERP environments
**Essential requirement
Australian work rights, a current driver's licence and a National Police Check are required. Hybrid, typically three days a week on-site.