DroneShield

2 weeks ago

Cyber Security - Governance, Risk and Compliance Specialist (AU)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 9 hours agoStatus: Live

Job Summary

Own and mature the Information Security Management System (ISMS) by leading ISO 27001 processes, including recertification, surveillance audits, and continuous improvement. Build scalable, low-friction GRC workflows using automation, integrations, and data-driven reporting to strengthen governance and risk management. Maintain a structured cyber risk register with executive-level visibility, support vendor and supply chain risk programs, and partner across Security, IT, Engineering, and Operations to drive control effectiveness globally.

Location: Sydney

Workplace: Onsite

Employment Type: Full time

Job Function: Legal, Risk & Compliance

Seniority: Mid level

Key Responsibilities

•Own and improve the ISO 27001 ISMS, including recertification, surveillance audits, and continuous improvement.
•Define and operate governance structures such as control ownership, policy lifecycle management, and internal assurance cadence.
•Lead internal audits, identify non-conformities, and drive remediation to closure.
•Maintain a structured cyber risk register and provide executive-level reporting for risk-based decision-making.
•Design and implement automation for assurance, compliance, and evidence collection, including control validation and GRC assurance activities across the business.

Key Requirements

•BS degree in Computer Science, Information Technology, or similar technical field, or equivalent practical experience.
•Demonstrated experience operating or owning an ISO 27001 ISMS and audit lifecycle.
•Minimum 5 years’ experience in related roles such as GRC Consultant, Security Engineer, Security Analyst, or Compliance and Risk Officer.
•Experience with project management, vendor and customer compliance programmes, and risk management/ISO 31000.
•Knowledge of corporate/infrastructure/cloud security fundamentals including identity and access management.

Experience:5+ yearsISO 27001GRCCybersecurityRisk managementCloud security

Education:Bachelor's in Computer Science, Information Technology

Skills:Engineering-led mindsetAutomation mindsetData-driven reportingExecutive communicationCollaboration

Tech Stack:ISO 27001ISMSAutomationDashboardsRESTful APIsLinuxCommand lineRisk registerIdentity and access management

Company Brief

DroneShield

Designs and manufactures counter-drone systems for detection, tracking, and mitigation using radar, RF, acoustic and camera sensors. Serves military, law enforcement, and critical infrastructure customers globally with integrated drone defense solutions.

Industry: Defense Technology

Company Size: Small (11 to 50 employees)

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: Sydney, Australia

Founded: 2013

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

DroneShield

2 weeks ago

Cyber Security - Governance, Risk and Compliance Specialist (AU)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 9 hours agoStatus: Live

Job Summary

Location: Sydney

Workplace: Onsite

Employment Type: Full time

Job Function: Legal, Risk & Compliance

Seniority: Mid level

Key Responsibilities

•Own and improve the ISO 27001 ISMS, including recertification, surveillance audits, and continuous improvement.
•Define and operate governance structures such as control ownership, policy lifecycle management, and internal assurance cadence.
•Lead internal audits, identify non-conformities, and drive remediation to closure.
•Maintain a structured cyber risk register and provide executive-level reporting for risk-based decision-making.
•Design and implement automation for assurance, compliance, and evidence collection, including control validation and GRC assurance activities across the business.

Key Requirements

•BS degree in Computer Science, Information Technology, or similar technical field, or equivalent practical experience.
•Demonstrated experience operating or owning an ISO 27001 ISMS and audit lifecycle.
•Minimum 5 years’ experience in related roles such as GRC Consultant, Security Engineer, Security Analyst, or Compliance and Risk Officer.
•Experience with project management, vendor and customer compliance programmes, and risk management/ISO 31000.
•Knowledge of corporate/infrastructure/cloud security fundamentals including identity and access management.

Experience:5+ yearsISO 27001GRCCybersecurityRisk managementCloud security

Education:Bachelor's in Computer Science, Information Technology

Skills:Engineering-led mindsetAutomation mindsetData-driven reportingExecutive communicationCollaboration

Tech Stack:ISO 27001ISMSAutomationDashboardsRESTful APIsLinuxCommand lineRisk registerIdentity and access management

Company Brief

DroneShield

Industry: Defense Technology

Company Size: Small (11 to 50 employees)

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: Sydney, Australia

Founded: 2013

Website LinkedIn