About the role

As a GRC Consultant, you’ll have the opportunity to work in Multi-Disciplinary Teams (MDT) that cover our end-to-end services, solving our clients most challenging cyber security problems across diverse technology environments. You’ll help our clients proactively Identify, Protect, Detect, Respond, and Recover from threats.

What You'll Do

• Support complex, cyber security projects in the Governance, Risk and Compliance domain
• Work with our customer base to assist them in identifying and effectively managing cyber security risk.
• Develop, implement and maintain the Security SRMP, SSP’s, SRAs (assist with) documentation, supporting certification and accreditation for the service being delivered.
• Maintain and improve the system security documentation package.

What You'll Bring

• Broad knowledge across a range of compliance frameworks (ISO 27001, PCI DSS, NIST, GDPR, etc.)
• Experience with ISM, Essential Eight, DSPF, or PSPF is highly desirable.
• Experience working with Defence or the Defence Industry preferred
• Demonstrated experience in developing security documentation such as Security Risk Management Plans (SRMP), and System Security Plans (SSP).
• Minimum 12 months of experience dealing with a diverse range of Information Technology & Communications projects or challenges.
• Experience with the ISM or implementing and/or auditing an ISO 27001 ISMS.  
• Networks and Systems Administrators who have experience in implementation of complex systems wishing to shift focus to GRC.

Due to the nature of the work, an NV1 clearance is required.

Why CyberCX?

• Joining CyberCX means being part of a passionate, purpose-driven team working to make Australia and New Zealand the safest places to connect online. You’ll enjoy:
• Access to industry-leading experts and professional development opportunities.
• A supportive, flexible, and collaborative workplace culture.
• Competitive salary and benefits package.

Ready to make an impact?

Apply now and join a team that’s helping shape the future of cyber resilience.

We kindly request no agency submissions for this role. Unsolicited CV’s will not be accepted, and no fees will be payable.