Senior GRC Specialist

Hansen Technologies (ASX: HSN) is a global software and services provider, serving energy, water/utilities, and telecommunications industries. With customers in 80+ countries, we foster collaboration across 26 global offices. From 5G advancements to renewable energy transitions, we empower customers to overcome challenges, innovate, and drive new business models.

At Hansen, we are also embedding AI enablement across our operations. From automating workflows and enhancing service delivery, to driving innovation in customer solutions, AI is shaping the next chapter of how we support our clients. With a focus on operational excellence and innovation, Hansen is using AI not just as a tool, but as a strategic enabler to deliver smarter, faster, and more resilient solutions for the future.

This is full
-time onsite role based in our Bethlehem office.

At Hansen, we're looking for a hands-on, high-impact security GRC professional to help us scale and mature our governance, risk, and compliance practices globally. You’ll design, implement, and evolve security governance initiatives, drive data protection efforts, own business continuity readiness, and be a visible force for change across the organisation. This is a rare opportunity to blend autonomy, innovation, and execution in a role that touches every corner of the business.

We’re looking for a builder, a strategic problem-solver, and a passionate security evangelist who thrives on making security integral to how we work.

• Risk Management:
  
  Lead and conduct cybersecurity risk assessments aligned with Hansen’s risk framework, identifying key findings and treatment actions. Ensure all risks related to security controls are documented, tracked, and remediated with accountability. Communicate risk status and third-party assessment outcomes to relevant stakeholders.
• Governance & Compliance:
  Develop, maintain, and enforce security policies and standards aligned with ISO 27001, SOC, NIST, and regulatory requirements. Support internal and external audits, certifications, and compliance monitoring, ensuring controls operate effectively and remediation is followed up.
• Information Security Management System (ISMS):
  Operate and continuously improve the ISMS, maintaining governance documentation, risk registers, and management reporting to meet audit and regulatory expectations.
• Data Protection & Identity Management:
  Implement and monitor data protection controls, conduct regular user access reviews to ensure least privilege, and validate that security mechanisms are correctly configured and effective.
• Security Awareness:
  Lead security awareness programs and campaigns to build a strong security culture across the organisation, engaging stakeholders and measuring impact.
• Incident Response & Resilience Readiness:
  Maintain and test the incident response plan through simulations and exercises. Own the Business Continuity and Disaster Recovery (BCP/DR) planning, coordinating regular testing and improvements to ensure organisational resilience.
• Stakeholder & Third-Party
  
  Risk Management:
  
  Engage with internal teams, external auditors, regulators, and third-party vendors to manage cybersecurity risks, provide assurance, and oversee third-party security performance.
• Governance & Reporting:
  Support and optimise GRC toolsets for risk tracking, control monitoring, and reporting. Produce clear and actionable management information for leadership and regulatory submissions.

• Strong background in hands-on security governance, risk management, and compliance delivery.
• Proven experience implementing and managing technical and administrative data protection controls.
• Working knowledge of key frameworks (ISO 27001,…