Cyber GRC Lead

About the company

We’re partnering with a leading Australian organisation, running enterprise-scale technology across a large national footprint. The organisation has an IT Disaster Recovery Standard in place, and is now looking for someone to bring it to life. This is a genuine opportunity to shape how IT resilience works day-to-day, not just how it’s written down.

About the role

This is a Cyber GRC Lead role. Around 70% of your time will be spent on IT disaster recovery, where you’ll act as the organisation’s IT Disaster Recovery Coordinator and own ITDR across Technology. The remaining 30% is technical leadership of a team of three GRC analysts working across NIST, maturity assessments and audit.

The team side is about coaching and mentoring rather than heavy people management. You’ll be the go-to for subject-matter depth, review and guidance, helping the team grow while you drive resilience across the business.

Your responsibilities

• Own and lead the ITDR program, establishing the governance, cadence and accountability to embed DR into business-as-usual
• Develop, maintain and assure recovery plans for critical technology services, including RTOs, RPOs, dependencies and recovery sequencing
• Build and run the DR testing and exercise program, validating recovery capability against agreed requirements
• Partner with Business Continuity and business stakeholders to keep ITDR aligned with BIA outcomes and recovery priorities
• Identify, track and report DR risks, gaps and remediation actions, and coordinate evidence for Internal Audit
• Provide technical leadership, coaching and mentoring to three GRC analysts across NIST CSF, maturity assessments and audit work
• Report on KPIs, KRIs and assurance across ITDR and Cyber GRC to senior stakeholders

Experience required

• Demonstrated, hands-on experience developing and maintaining IT disaster recovery plans. This is the most important part of the role.
• Experience running DR tests or exercises, and closing the gaps they surface
• Solid understanding of RTOs, RPOs, BIAs and technology dependency mapping
• Working knowledge of governance and compliance frameworks (NIST CSF, ISO27001, PCI DSS)
• Experience coaching or mentoring GRC analysts
• Certifications such as CBCI, CBRITP, CISA, CISM, CRISC or ISO27001 LI/LA highly regarded

If you’ve got real DR delivery experience, enjoy developing others, and you’re excited to embed resilience across a large enterprise, this is a great one to explore!

How to apply

Click apply or reach out to [email protected] for a confidential, informal conversation.