• 6-month CONTRACT with potential extension

• Hybrid/Remote working arrangement 

• Daily rate: $1100 (inc SUPER)

ROLE OVERVIEW

Are you a strategic thinker with a passion for strengthening enterprise security postures? We are seeking a highly capable Senior Cyber Security GRC Specialist to spearhead our security governance, risk, and compliance transformation.

Reporting directly to the Head of GRC, you will take charge of advancing our control environments and compliance workflows, ensuring strict alignment with industry gold standards, including the SOCI Act, Essential Eight, NIST, and Systems of National Significance (SoNS). In this pivotal position, you will drive strategic enterprise security initiatives, acting as the bridge between technical teams and business units to guarantee our critical infrastructure maintains a robust, defensible, and continuously audit-ready posture.

WHAT YOU'LL BE DOING

• Champion the rollout of comprehensive GRC improvement strategies, actively tracking the deployment of security controls, pinpointing vulnerabilities, and orchestrating targeted remediation efforts.

• Design, implement, and institutionalize risk accountability structures, governance models, and regular reporting cycles across various business verticals.

• Synchronize regulatory compliance operations (spanning SOCI, Essential 8, and NIST frameworks) seamlessly across IT, Network operations, Security, and wider corporate divisions.

• Spearhead the delivery of critical enterprise security transformation programs, guaranteeing alignment and collaboration across multiple cross-functional teams.

• Construct and oversee unified risk registers, compliance visualization dashboards, and comprehensive control architectures.

• Manage end-to-end audit preparations, orchestrating evidence gathering and assessments to guarantee absolute regulatory compliance and defensibility.

• Lead key governance assemblies, including Steering Committees and Risk Advisory boards, to guide strategic prioritization, escalation, and executive decision-making.

• Drive the incorporation of Systems of National Significance (SoNS) into our broader SOCI compliance framework, handling complex risk assessments and control alignments.

• Deploy and streamline GRC software solutions and automation workflows (such as Jira Service Management or similar ticketing platforms) to optimize compliance tracking.

• Actively anticipate, escalate, and formulate robust mitigation strategies for emerging security risks before they impact the business.

MORE ABOUT YOU

• A proven track record delivering complex, enterprise-wide cyber security maturity and GRC uplift programs.

• Deep, practical knowledge of major regulatory mandates and frameworks—specifically the SOCI Act, Essential 8, NIST CSF, and SoNS obligations.

• Demonstrated success navigating, influencing, and driving change within intricate, multi-domain ecosystems (backgrounds in Telecommunications or large-scale corporate enterprise technology are highly regarded).

• Proven ability to establish and embed risk management frameworks, operational control models, and governance protocols from the ground up.

• Hands-on experience configuring and utilizing modern GRC automation tools and ticketing workflows (e.g., Jira, ServiceNow, etc.).

• Top-tier stakeholder engagement abilities, capable of translating complex cyber risks to executive leadership and seamlessly facilitating governance committees.

• Solid understanding of Microsoft 365 security mechanisms and related ecosystem enhancement strategies.

• Strong background in managing external audits, assurance programs, and regulatory assessments (such as IRAP, ACSC engagements, or external third-party audits).

• Relevant, industry-recognized certifications are highly desirable (e.g., CISM, CRISC, CISSP, or ISO 27001 Lead Auditor/Implementer).

If this opportunity aligns with your expertise and aspirations, please apply! Please feel free to reach out directly to Muneem Meah at muneem.meah(at)aurec.com, should you have any questions!

Only shortlisted candidates will be contacted!