search Browse Jobs
Cyber GRC LeadCreditorWatch · Sydney, New South Wales, Australia
CreditorWatch logo

CreditorWatch

company page ↗

Cyber GRC Lead

🗓️ Posted 2026-09-07 Sydney, New South Wales, Australia Full-time Hybrid ICT
💰 Salary Not shared 📊 Market A$10,833–A$15,000/mo

About the Company

CreditorWatch is a leading Australian data and technology company that provides businesses with access to unique data and innovative products, enabling customers to confidently manage their commercial relationships, improve productivity and reduce financial risk. Established in 2010, the company offers a comprehensive suite of credit reporting products and data insights covering the entire customer lifecycle, from onboarding and credit decision automation to credit risk management and automated collections. CreditorWatch has been recognized as one of AFR's Top 10 Best Places to Work and certified by Great Place to Work for four consecutive years (2022 2025), and is currently scaling rapidly.

About the Job

The Cyber GRC Lead role is a hands on leadership position responsible for owning and maturing the company's information security management and assurance program. In this role you will turn regulatory, certification, customer and business expectations into a practical, sustainable control environment, leading cyber risk management, assurance, policy governance, audit readiness, third party security and resilience activities while building strong ownership across the business.

Role & Responsibilities

  • ● Lead cyber risk management, assurance, policy governance, audit readiness, third party security and resilience activities, while building strong ownership across the business
  • ● Own and deliver the Cyber GRC roadmap, aligned to business priorities, risk appetite and regulatory requirements
  • ● Establish clear governance, accountability, reporting and measures of effectiveness
  • ● Lead and develop Cyber GRC capability, including internal and external stakeholders
  • ● Own the information security risk management framework and register, including risk assessment, treatment, acceptance and reporting
  • ● Oversee the information security policy framework, ensuring policies, standards and procedures remain current and effective
  • ● Establish sustainable control ownership, testing and remediation practices
  • ● Lead ongoing readiness and compliance for ISO 27001 and SOC 2, including audit planning, evidence coordination, control testing and remediation
Show 2 more
  • ● Develop readiness for additional obligations and certifications, including ISO 42001, CPS 230, CPS 234 and the ASD Essential Eight
  • ● Work closely with Engineering, Legal, P&C, IT and business leaders to ensure cyber risk is understood, decisions are evidence based and controls operate effectively