Cyber Security - Governance, Risk and Compliance Specialist at DroneShield

Sydney, New South Wales, Australia -

Full Time

Start Date

Immediate

Expiry Date

07 Oct, 26

Salary

0.0

Posted On

09 Jul, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

ISO 27001, GRC, Risk Management, ISMS, Internal Auditing, Vendor Risk Management, Compliance Automation, Security Governance, ISO 31000, Identity And Access Management, Cloud Security, Project Management, Linux, RESTful APIs, AI and LLM Technologies, Data Visualization

Industry

Defense and Space Manufacturing

Description

About the role DroneShield is looking for a GRC Specialist with strong ISO 27001 experience to own and mature our Information Security Management System (ISMS) and strengthen governance and risk management across the business. This role is central to ensuring our security posture remains audit-ready, consistently governed across global operations, and aligned to business risk and decision-making. You will own ISO 27001 and core GRC processes, including recertification, surveillance audits, continuous improvement of the ISMS, and the development of scalable, low-friction compliance processes. You will also support alignment with frameworks such as ISM, PSPF, DISP, CMMC and NIST where required. You will also own and mature DroneShield’s supply chain and vendor risk management programme. We are looking for someone who brings an engineering-led mindset to GRC — using automation, integration, and data-driven reporting to improve assurance, evidence collection, and executive visibility of risk. Responsibilities, Duties and Expectations Own and improve the ISO 27001 ISMS, including recertification, surveillance audits, and continuous improvement activities. Define and operate governance structures, including control ownership, policy lifecycle management, and internal assurance cadence. Lead internal audits, identify non-conformities, and drive remediation to closure. Maintain a structured cyber risk register and provide clear executive-level reporting to support risk-based decision-making. Design and implement automation for assurance, compliance, and evidence collection activities. Lead control validation and broader GRC assurance activities across the business. Respond to customer and regulatory assurance requirements using efficient, scalable processes. Work closely with Security, IT, Engineering, and Operations to improve governance and control effectiveness across global operations. Qualifications, Experience and Skills BS degree in Computer Science, Information Technology, or a similar technical field, or equivalent practical experience. Demonstrated experience operating or owning an ISO 27001 ISMS and audit lifecycle. Minimum 5 years’ experience in related roles, which may include: - GRC Consultant - Security Engineer - Security Analyst - Compliance and Risk Officer Essential knowledge and experience: - Project management techniques and processes - Vendor and customer compliance programmes - Strong practical experience visualising security control information, including dashboards, integrations, or other risk-related reporting - Large-scale data and information handling - Risk management and ISO 31000 - Corporate, infrastructure, and cloud security fundamentals - Identity and access management Desirable: - Comfortable working on the command line in a Linux-first environment - Familiarity with RESTful APIs - Familiarity with AI and LLM technologies Note for recruitment agencies: We do not accept unsolicited candidates from external recruiters unless specifically instructed.

Responsibilities

Own and mature the ISO 27001 Information Security Management System (ISMS) and lead governance, risk, and compliance processes. Implement automation for assurance and evidence collection while managing supply chain and vendor risk programs.