Cyber Security GRC Engineer

📋 Description

• Support the operation and continual improvement of the ISO 27001 ISMS, including surveillance and
• Assist with internal audits, control validation and broader GRC assurance activities across
• Maintain accurate GRC records, including risks, controls, evidence, non-conformities, exceptions
• Support cyber risk assessments and the maintenance of the cyber risk register.
• Support the mapping and alignment of controls to relevant frameworks, including the ISM, PSPF
• Contribute to customer, tender and regulatory assurance responses using accurate, reusable and

🎯 Requirements

• BS degree in Computer Science, Information Technology, or a similar technical field, or equivalent
• Demonstrated practical experience in cyber security GRC, technology risk, third party risk
• Candidates would typically bring 3–5 years of relevant experience in related roles, which may
• Practical experience supporting an ISO 27001 ISMS, audit lifecycle or comparable security assurance
• Experience conducting or supporting risk assessments, control assessments, compliance reviews or
• Practical scripting or integration experience (Python, PowerShell, REST APIs, Jira or Power