GRC and Advisory Consultant
Core
Deliver advisory and consulting services on cybersecurity risk, governance, policy, and compliance to Federal Government departments.
Role type
Senior GRC and Advisory Consultant
Builds
Security policies, procedures, and compliance certifications (IRAP) aligned with government standards.
Domain
Government Cybersecurity
Required skills
Cybersecurity GRC, Risk management frameworks, Security standards (PSPF, ISM, Essential 8, DSPF, ISO 27000, NIST CSF/800, CIS), Technical documentation, OS security (Windows, Linux), Network/Application/Web security, IRAP pre-assessment and certification
Preferred skills
Team mentoring, Cyber threat detection and response, Technical writing, IRAP Assessor certification, CISSP/CISA/CISM/GSEC certifications
Technologies
Windows, Linux, NIST CSF, ISO 27000, CIS
Responsibilities
Advise internal teams and clients on security and compliance requirements, Write security policies and procedures aligned to ISM and PSPF, Implement Essential 8 controls, Conduct IRAP pre-assessment and certification/accreditation
Seniority
Senior, hands-on IC
