" \u003cdiv class=\"ja-job-details\"\u003e \u003ch2 class=\"title\"\u003eCyber GRC \u0026amp; IT Resilience Lead\u003c/h2\u003e \u003cdiv class=\"meta\"\u003e \u003cul class=\"classifications\"\u003e \u003cli data-id=\"14076\"\u003e IT Security \u003c/li\u003e \u003cli data-id=\"14077\"\u003e Permanent / Full Time \u003c/li\u003e \u003cli data-id=\"14078\"\u003e Melbourne \u003c/li\u003e \u003c/ul\u003e \u003cp class=\"date-posted\"\u003e 23/10/2026 \u003c/p\u003e \u003c/div\u003e \u003cul class=\"bullet-points\"\u003e \u003cli\u003eLead IT resilience at an ASX-Listed org\u003c/li\u003e \u003cli\u003ePermanent | Melbourne (hybrid) | From $190k + super\u003c/li\u003e \u003cli\u003e2IC to the Head of IT Security, leading at team of GRC analysts\u003c/li\u003e \u003c/ul\u003e \u003cdiv class=\"description\"\u003e We\u0027re partnering with a large ASX-listed organisation to hire a Cyber GRC \u0026amp; IT Resilience Team Lead. This is a brand-new role and a genuine greenfield opportunity.\u003cbr\u003e \u003cbr\u003eThe ITDR Standard and templates are already written. What\u0027s needed now is \u003cbr\u003esomeone to drive them forward and turn them into a working program across Technology.\u003cbr\u003e \u003cbr\u003eThis role isn\u0027t for a GRC all-rounder who has picked up some DR along the way. We\u0027re looking for a GRC professional with proven experience establishing DR within an organisation.\u003cbr\u003e\u003cbr\u003e You\u0027ll act as 2IC to the Head of IT Security and as technical lead to three GRC analysts working across third-party risk, maturity assessments and audit.\u003cbr\u003e \u003cbr\u003e\u003cstrong\u003eWhat\u0027s on offer\u003c/strong\u003e\u003cbr\u003e \u003cul\u003e \u003cli\u003eHigh visibility, with real backing from senior leadership\u003c/li\u003e \u003cli\u003eA strong budget, including training and certification support\u003c/li\u003e \u003cli\u003eA supportive, collaborative cyber team\u003c/li\u003e \u003cli\u003eA largely greenfield DR program: the Standard is written, you make it work\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003eWhat you\u0027ll be doing\u003c/strong\u003e\u003cbr\u003e \u003cul\u003e \u003cli\u003eAct as IT Disaster Recovery Coordinator and operationalise the ITDR Standard across Technology\u003c/li\u003e \u003cli\u003eCoordinate technology teams to build and maintain recovery plans, RTOs/RPOs, dependencies and recovery sequencing\u003c/li\u003e \u003cli\u003ePrioritise the systems in scope for audit, then tier critical systems.\u003c/li\u003e \u003cli\u003eEstablish and run the DR testing and exercise program, closing the gaps it surfaces\u003c/li\u003e \u003cli\u003eWork with the enterprise Business Continuity team so ITDR aligns with BIA outcomes\u003c/li\u003e \u003cli\u003eTrack and report DR risks, gaps and audit remediation to senior leadership\u003c/li\u003e \u003cli\u003eLead three GRC analysts across third-party risk, risk registers, maturity assessments, ISO 27001 and NIST CSF\u003c/li\u003e \u003cli\u003eReport on KPIs and KRIs across ITDR and Cyber GRC\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003eWhat you\u0027ll bring\u003c/strong\u003e\u003cbr\u003e \u003cstrong\u003eMust-have:\u003c/strong\u003e\u003cbr\u003e \u003cul\u003e \u003cli\u003eProven experience developing and maintaining IT disaster recovery plans, and establishing DR within an organisation\u003c/li\u003e \u003cli\u003eSolid understanding of RTOs, RPOs and BIAs, plus system tiering and dependency mapping\u003c/li\u003e \u003cli\u003eStrong GRC background across frameworks such as NIST, ISO 27001 or PCI DSS\u003c/li\u003e \u003cli\u003eExperience coaching or leading GRC analysts\u003c/li\u003e \u003cli\u003eConfidence presenting to senior stakeholders in a fast-paced environment\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003eDesirable:\u003c/strong\u003e\u003cbr\u003e \u003cul\u003e \u003cli\u003eRetail, healthcare, logistics or critical infrastructure experience\u003c/li\u003e \u003cli\u003eCertifications such as CBCI, CBCP, ISO 22301, CISA, CISM, CRISC or ISO 27001 LA/LI\u003c/li\u003e \u003cli\u003eExposure to SAP and large ERP environments\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003eEssential requirement\u003cbr\u003e\u003c/strong\u003e\u003cbr\u003e Australian work rights, a current driver\u0027s licence and a National Police Check are required. Hybrid, typically three days a week on-site.\u003cbr\u003e\u003cbr\u003e \u003cstrong\u003eAbout Decipher Bureau\u003c/strong\u003e\u003cbr\u003e Decipher Bureau is Australia\u0027s leading cyber security recruitment specialist, partnering with organisations across government, critical infrastructure and enterprise to find and secure exceptional talent. We don\u0027t just match skills to a job description. We take the time to understand the technical demands of a role and whether a candidate will genuinely thrive in the team. Because the right placement beats a quick one, every time.\u003cbr\u003e\u003cbr\u003e \u003cstrong\u003eInterested?\u003c/strong\u003e\u003cbr\u003e Reach out for a confidential chat:\u003cbr\u003e \u003cul\u003e \u003cli\u003eAnthony Buccat: 0452 415 858\u003c/li\u003e \u003cli\u003eabuccat@decipherbureau.com\u003c/li\u003e \u003c/ul\u003e \u003c/div\u003e \u003cdiv class=\"apply\"\u003e \u003ca class=\"back-link\" href=\"#\" title=\"Back to search results\"\u003eBack to search results\u003c/a\u003e \u003cinput type=\"button\" class=\"ja-button\" data-job-id=\"4480971\" value=\"Apply Now\" title=\"Apply Now\" /\u003e \u003c/div\u003e \u003c/div\u003e "