Эта вакансия в архиве
Посмотреть похожие вакансии ↓7 дней назад
Information Security & GRC Lead (AI)
Описание вакансии
Текст:
TL;DR
Information Security & GRC Lead (AI): Designing and managing organisation-wide information security, governance, risk, and compliance systems for sustainable AI infrastructure with an accent on certification management, security policy, and regulatory frameworks. Focus on leading audits, maintaining ISO 27001, ISO 27701, SOC 2, NIST, and Essential 8 compliance, and advising business units on cyber security risk and controls.
Location: Sydney, Melbourne or Hobart, Australia
Company
develops and operates energy-efficient AI infrastructure and AI Cloud, a large-scale GPU cloud platform, across Asia Pacific.
What you will do
- Lead the organisation-wide information security, governance, risk, and compliance function.
- Manage existing GRC processes, certifications, and accreditation programs, while developing new processes for global projects.
- Lead internal and external audit programs, including audits conducted through DRATA, certification audits, and penetration testing coordination.
- Develop group policies, frameworks, standards, guidelines, and security communications across information security, privacy, ESG, and business continuity.
- Advise functional areas and business units on compliant systems, processes, controls, and information security risks.
- Act as Group Data Protection Officer and lead information and cyber security compliance working groups and committees.
Requirements
- Senior technical experience in risk and compliance, preferably within technology-focused businesses.
- Experience auditing management systems and certifications including ISO 27001, ISO 27701, and ISO 22301.
- Advanced experience with DRATA or a similar compliance platform.
- Knowledge of SOC 2 Type 1 and Type 2, ISO 27001, ISO 27701, NIST, ASD Essential 8, endpoint security, SIEM, and SOC planning.
- Strong metrics, executive reporting, stakeholder management, communication, and vendor management skills.
- Australian Government or Defence security clearance at Baseline level or higher, with the ability to obtain NV1 clearance.
Nice to have
- Experience with international compliance frameworks and multinational technology companies.
- Familiarity with modern AI tools and technologies.
- Project and delivery management experience.
- Experience with enterprise security tools such as SIEM, EDR/XDR, and vulnerability management platforms.
- Exposure to Fortinet, Palo Alto, or other security appliance vendors.
Culture & Benefits
- Permanent full-time employment.
- Founder-led environment with accessible leadership, fast decision-making, and minimal bureaucracy.
- Opportunity to work with experts in AI infrastructure, energy systems, and next-generation compute.
- Inclusive workplace committed to diversity and sustainable engineering.