GRC and Advisory Consultant
Core
Deliver advisory and consulting services on cybersecurity risk, governance, policy, and compliance to Federal Government departments.
Role type
Senior GRC and Advisory Consultant
Builds
Security policies, procedures, and compliance frameworks aligned with government standards (ISM, PSPF, Essential 8, IRAP).
Domain
Government Cybersecurity / Regulatory Compliance
Required skills
Cybersecurity GRC, risk management frameworks, security policy writing, Essential 8 controls implementation, IRAP pre-assessment, NIST CSF/800 series, ISO 27000, PSPF, ISM, DSPF, internet/application/web/network security, OS security (Windows/Linux)
Preferred skills
Team mentoring, cyber threat detection and response, IRAP Assessor certification, CISSP/CISA/CISM/GSEC certifications
Technologies
NIST CSF, NIST 800 series, ISO 27000, CIS, Windows, Linux
Responsibilities
Advise internal teams and clients on security and compliance requirements, write security policies and procedures aligned to ISM and PSPF, implement Essential 8 controls, conduct IRAP pre-assessments and certification/accreditation.
Seniority
Senior, hands-on IC
