Cyber GRC Consultant: Elevate Compliance & Risk

ctrl:cyber; Australia; On-site; AUD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive salary

Flexible work options

Career growth

Job summary

Ctrl is an Australian cybersecurity firm helping some of the country’s biggest organisations stay ahead of cyber risk. We’re growing our GRC team and seek an experienced Governance Risk & Compliance Consultant to ensure client programs align with standards and are efficient and secure.

You’ll develop and implement policies, perform risk assessments and audits, and collaborate with technology teams to test incident response plans and training programs.

Qualifications

• Bachelor’s degree or equivalent work experience in a related field.
• Experience in cybersecurity governance, risk and compliance consulting.
• Strong knowledge of NIST, ISO 27001/2 and CIS Controls.

Responsibilities

• Conduct risk assessments and audits for clients to identify vulnerabilities.
• Develop and implement information security policies and compliance programs.
• Create and maintain cybersecurity governance frameworks aligned with risk appetite.
• Perform compliance assessments against ISO 27001, NIST CSF, Essential 8, PCI-DSS, Australian ISM, GDPR.
• Develop training and awareness programs to foster security culture.
• Collaborate with client technology teams on incident response planning and tabletop exercises.
• Provide guidance to internal security teams and other departments on governance.
• Lead project and retainer engagements with minimal supervision.

Skills

Risk assessment

Auditing

Policy development

Governance framework

Regulatory compliance

Project management

Stakeholder management

Training and awareness

Communication

Education

Bachelor's degree or equivalent

Tools

Microsoft 365

Azure

AWS

SIEM

EDR

Job description

Ctrl is an Australian cybersecurity firm helping some of the country’s biggest organisations stay ahead of cyber risk. We’re growing our GRC team and seek an experienced Governance Risk & Compliance Consultant to ensure client programs align with standards and are efficient and secure.

You’ll develop and implement policies, perform risk assessments and audits, and collaborate with technology teams to test incident response plans and training programs.