Cyber Security Consultant

Balance Recruitment and Balance Consulting; Sydney; Hybrid; AUD 140,000 - 200,000; Full time

Job summary

Balance Consulting Services in Australia seeks a Lead Cyber Security Adviser to strengthen government services by providing strategic and operational cyber security guidance, leading governance, risk and compliance activities, and helping stakeholders apply practical security controls in a complex environment.

The role is available across Canberra, Brisbane, Melbourne, Sydney or Adelaide on a 12‑month contract.

Qualifications

• Experience in governance, risk and compliance (GRC).
• Knowledge of PSPF, ISM, Essential Eight and NIST.
• Experience with security risk assessments and SSPs.
• Familiarity with network, endpoint and application security controls.
• Ability to lead stakeholder relationships and advise on complex matters.
• Experience with GRC tools like Archer IRM and SIEM platforms.

Responsibilities

• Develop and review security policies, guidelines and procedures.
• Identify and prioritize cyber risks; recommend mitigations.
• Lead risk assessments and assurance reviews for apps, websites and processes.
• Review designs and controls to identify vulnerabilities.
• Prepare for audits by monitoring compliance with standards.
• Assess third‑party software and vendors against baselines.
• Advise on security features of ICT products and resolve complex inquiries.
• Help stakeholders embed security standards across policies.
• Promote security awareness and communicate risk trends.
• Manage team operations, resources and workflows to deliver outcomes.

Skills

GRC governance

Stakeholder management

Security risk assessments

Security controls

Cloud platforms (Azure/AWS/GCP)

SIEM experience

AI security training

Tools

Archer IRM

Rapid7

Tenable

Microsoft Defender

Microsoft Sentinel

IAM

Azure

AWS

GCP

Job description

Join our client’s team as a Lead Cyber Security Adviser and help strengthen the security of critical government services. In this senior role, you’ll provide strategic and operational cyber security advice, lead governance, risk and compliance activities, and support stakeholders to apply practical security controls.

These opportunities are available in Canberra, Brisbane, Melbourne, Sydney or Adelaide. The initial contract is for up to 12 months, with an estimated start date of 1 February 2027. The role is hybrid: the first six weeks are onsite, after which flexible arrangements may be considered. Hybrid work requires at least three days per week in the designated office and a residence within reasonable commuting distance.

What you’ll do

• Develop, maintain and review information security policies, guidelines, standards and procedures.
• Identify, assess and prioritise cyber security risks, recommending appropriate mitigations or acceptance strategies.
• Lead risk assessments, business impact analysis and assurance reviews for applications, websites, tools and business processes.
• Review system designs and security controls to identify vulnerabilities and recommend improvements.
• Prepare for internal and external audits by monitoring compliance with relevant standards and requirements.
• Assess third-party software and vendors against security baselines.
• Provide expert advice on security features and capabilities of ICT products, and resolve or elevate complex security enquiries.
• Help stakeholders embed security standards and build capability in applying policies and guidelines.
• Promote security awareness, sharing relevant risk trends and mitigation approaches.
• Manage team operations, performance, resources and workflows, setting priorities to deliver business outcomes.

What you’ll bring

• Strong cyber security experience, including governance, risk and compliance (GRC).
• Knowledge of relevant frameworks and requirements, such as the Protective Security Policy Framework (PSPF), Information Security Manual (ISM), Essential Eight and NIST.
• Experience with security risk assessments, security controls and system accreditation, including System Security Plans (SSPs) and security assessment processes.
• Familiarity with network, endpoint and application security controls.
• Confident stakeholder relationship skills and the ability to provide specialist advice on complex matters.
• Experience leading work and managing performance, resources and priorities.
• Experience with relevant tools and environments will be valuable, including Archer IRM or similar GRC platforms; Rapid7, Tenable or Microsoft Defender; Microsoft Sentinel or another SIEM; identity and access management technologies; and Azure, AWS or Google Cloud Platform.
• ISACA AI Security or AI Audit training is desirable.

Security and work arrangements

• Candidates must be able to obtain and maintain a Negative Vetting Level 1 security clearance. The role is at Lead level, equivalent to EL1.

Balance Consulting Services is committed to equal opportunity employment. We celebrate diversity and encourage people from all sections of our community to apply for.