Cyber GRC Lead - ISO27001/SOC 2 Expert (Hybrid)

CreditorWatch in Sydney is seeking a hands on Cyber GRC Lead to mature our information security program. You will own risk management, policy governance, audits and third party security, while partnering with Engineering, Legal, IT and business leaders to drive practical, evidence based controls.

This full time, hybrid role reports to the Head of IT & InfoSec in our Sydney CBD office. You'll build a robust GRC capability, manage certifications (ISO 27001, SOC 2), and shape AI governance.