Governance, Risk, and Compliance (GRC) Specialist

Your Role
In this role, you will support the development and implementation of a unified (IT & OT) Information Security Management System (ISMS) including policies, standards, and processes, while being responsible for the subsequent risk management, governance and compliance activities and reporting.
  
Operating at Team Lead level, you will:

• Build and maintain Department IT/OT knowledge to support the creation of policies, standards, and processes.
• Maintain and update the cybersecurity requirements documents.
• Contribute to policy development priorities, policy formulation, documenting associated framework artefacts or correspondence
• Contribute to the creation of a cybersecurity dashboard showing alerts across sites and systems.
• Review existing vendor reports and work with the Director to streamline regular vendor reporting including contractual obligations, security and safety information, and incident information.
• Identify risks, issues, inter-dependencies, rub-points, compliance, and system functional -vs- operational / legislation requirements to meet planned implementation timelines.
• Perform technical (information and cybersecurity) risk assessment across complex Operational Technology landscapes.
• Assess control baselines to ensure compliance with Essential Eight and ISO 27001. (IS18 and Queensland Protective Security Framework).
• Develop and deliver information and cybersecurity awareness training, specific to Operational Technology.
• Establish a governance and compliance framework for Policy deployment and post-implementation performance audits
• Develop templates for the ISMS document creation and reporting.
• Create and facilitate a collaborative review schedule for the ISMS to ensure relevance, currency of content, and identification of updates or changes

About You

• Previous experience in a Cyber Security, GRC or ISMS related role
• Knowledge of ISO 27001, Essential 8, QPSF, PSPF
• Exceptional writing ability, ideally in a policy framework formulation context
• Solid experience in research, data collation, interpretation and translation of legislation, standards and existing policies / processes
• High calibre organisational skills with the ability to manage to priorities, co-ordination of activities to meet project schedule.
• Solid interpersonal and engagement skills to build productive relationships with internal and external stakeholders at all levels
• Knowledge of change management, engagement and communication methodologies
• Quality assurance and compliance expertise and the capability to measure, monitor and evaluate operational performance and compliance
• Experience with MS Project for scheduling, controls and reporting.

While no formal qualifications are required the following would be desirable:

• ISO 27001 Lead Implementor or Lead Auditor
• Project Management certifications such as PRINCE2 or PMP
• Tertiary qualifications across Electronics, Electrical Engineering, or PLC (Computer Science)

Experience in, or an awareness of, contemporary correctional practices, criminal justice environment or similar human service/regulatory agency would be highly desirable.
  
Experience within Queensland Government would be highly regarded, but not essential.
  
What is on offer

• Contract to mid-April 2027
• $105 per Hour + 12% Superannuation
• 38 hours per week, Monday to Friday
• Brisbane CBD office
• Easily accessible by public transport
• Weekly pay cycles
• No administration or payroll fees
• Support of specialist Government & Public Sector recruitment consultants at Kingston

Next Steps  
Click APPLY NOW and upload your CV (MS Word preferred) 
 
We actively encourage the use of Cover Letters to highlight your relevant skills and experience aligning to the role.   
 
We are interviewing and shortlisting this role immediately, so do not delay your application.
 
Confidential enquiries can be directed to:

James Flanagan
Manager – Government & Public Sector
james@kingstonhumancapital.com.au
0499 040 756
 
Kingston Human Capital specialises in recruitment for the Queensland Government and Public Sector.
 
If this role isn't quite right for you, but you are seeking a similar opportunity, reach out for a confidential discussion about your career.