Compliance Manager

Salary: $55 – $75 per hour

CYBERNEST is seeking an experienced and motivated ISO/IEC 27001:2022 Compliance Manager to take ownership of the ongoing management, maintenance and continual improvement of our Information Security Management System (ISMS) and other ISO systems.

This is a dedicated ISO compliance position for someone with demonstrated, practical knowledge of ISO/IEC 27001:2022.

The position initially offers one to two flexible days per week and is based at CYBERNEST headquarters in Chipping Norton. For the right person who demonstrates capability, commitment and value to the business, there is a genuine opportunity for the role to expand progressively, potentially to a full-time position incorporating responsibilities across CYBERNEST’s cybersecurity, drone operations and security advisory services.

About CYBERNEST

CYBERNEST is a growing Australian business operating across three specialised service areas:

· Cybersecurity and information security compliance

· Drone operations and remotely piloted aircraft systems

· Security and operational advisory services

We offer a practical, hands-on working environment where the successful applicant can directly influence our compliance program, strengthen our management systems and grow alongside the business.

The Role

The ISO Compliance Manager will be responsible for coordinating and maintaining CYBERNEST’s ISO/IEC 27001:2022 compliance framework and supporting the ongoing effectiveness of its ISMS.

Key responsibilities include:

· Maintaining and continually improving the CYBERNEST ISMS

· Reviewing and updating ISO policies, procedures, registers and controlled documents

· Coordinating scheduled document reviews and approval processes

· Monitoring compliance obligations, controls, risks and treatment actions

· Maintaining the Statement of Applicability and supporting control evidence

· Managing internal audit activities and coordinating corrective actions

· Preparing CYBERNEST for surveillance, recertification and other external audits

· Monitoring nonconformities, observations and improvement opportunities

· Supporting risk assessments, management reviews and compliance reporting

· Monitoring security objectives, KPIs and continual improvement actions

· Assisting managers and personnel to understand their ISO responsibilities

· Ensuring suitable records and objective evidence are maintained

· Working directly with the Director and relevant CYBERNEST managers

Essential Requirements

Applicants must have:

· Demonstrated knowledge of and practical experience with ISO/IEC 27001:2022

· Experience implementing, maintaining, coordinating or auditing an ISMS

· A sound understanding of ISO 27001 clauses, Annex A controls, risk management and the Statement of Applicability

· Experience preparing for internal or external ISO audits

· Strong document-control and compliance-record management skills

· The ability to work independently and take ownership of assigned responsibilities

· Strong written communication and attention to detail

· The ability to translate ISO requirements into practical business processes

Applications that do not demonstrate specific ISO/IEC 27001:2022 knowledge, experience or exposure may not be considered.

Highly Regarded

The following will be viewed favourably:

· ISO/IEC 27001 Lead Implementer or Lead Auditor qualifications

· Internal auditor training or experience

· Experience working within an ISO-certified organisation

· Cybersecurity, governance, risk or compliance experience

· Exposure to ISO 9001, ISO 45001, privacy or other management systems

· Experience in aviation, drone operations, security services or regulated environments

Working Arrangements

· Part-time employment

· One to two days per week

· Flexible working days by agreement

· Office-based at CYBERNEST headquarters in Chipping Norton

· Potential for increased days and expanded responsibilities based on performance, capability and business requirements

This position is best suited to someone who values flexibility but still wants to take genuine ownership of a growing organisation’s ISO compliance program.

Opportunity for Growth

CYBERNEST is continuing to expand its cybersecurity, drone and advisory capabilities. A successful employee who proves valuable to the organisation may have the opportunity to increase their working days and develop into a broader role across these service areas.

Any expansion of the position will depend on demonstrated performance, suitability, capability and the operational needs of CYBERNEST.