Senior GRC Consultant
Core
Senior GRC Consultant delivering technical security assurance, risk assessments, and compliance advisory across cloud, hybrid, and emerging tech environments (including AI) for regulated Australian organizations.
Role type
Senior IC GRC Consultant (Technical Assurance & Advisory)
Builds
Cybersecurity strategies, roadmaps, governance frameworks, policies, and compliance programs aligned with frameworks like CPS, NIST, ISO 27001, and ASD Essential Eight.
Domain
Cybersecurity, Governance, Risk, and Compliance (GRC)
Required skills
Technical security assurance, cloud security assessment, identity security, endpoint protection, security monitoring, risk analysis, compliance framework application (CPS/NIST/ISO/ASD), stakeholder communication, policy design, regulatory obligation translation.
Preferred skills
CISSP, CISM, CISA, CRISC, SABSA, ISO 27001 Lead Implementer/Auditor, ISO 42001 Lead Implementer/Auditor, cloud security architecture certifications (AWS/Azure/GCP).
Technologies
Cloud platforms (AWS, Azure, GCP), Security frameworks (NIST, ISO 27001, ASD Essential Eight, APRA CPS 230/234), Identity management tools, Endpoint protection systems, Security Information and Event Management (SIEM).
Responsibilities
Conduct technical security assurance across cloud and hybrid environments; assess design and operating effectiveness of security controls; analyze telemetry to identify control weaknesses; facilitate risk workshops and compliance reviews; advise stakeholders on regulatory obligations; design and monitor internal controls and policies.
Seniority
Senior, hands-on IC with strategic advisory capability.
