GRC and Advisory Consultant

dxctechnology; City of Brisbane; Hybrid; AUD 140,000 - 190,000; Full time

Job summary

DXC Technology is seeking a seasoned cybersecurity professional to join our team delivering advisory and consulting services to Federal Government departments. The role focuses on risk governance, policy development and compliance within a government context, helping clients implement robust security programs.

You will lead security assessments, advise on control implementations (including Essential 8 and ISM mappings), develop policies and procedures, and collaborate with cross-functional teams

Qualifications

• 5+ years IT experience including 2–4 years in Information Security, Risk, Audit or similar.
• Bachelor’s or Master’s degree (or equivalent demonstrated experience)
• Strong knowledge of PSPF, ISM, Essential 8, DSPF, ISO 27000, NIST CSF/800 series, CIS
• Experience advising internal teams and clients on security and compliance requirements
• Proven ability to write security policies and procedures aligned to ISM and PSPF
• Hands‑on experience implementing Essential 8 controls
• IRAP pre‑assessment and certification/accreditation experience
• Solid understanding of internet, application, web and network security
• Experience with OS security (Windows, Linux, etc.)
• Strong background in cybersecurity GRC
• Knowledge of risk management frameworks and methodologies
• Skilled in producing high‑quality technical documentation
• Ability to communicate effectively with technical and non-technical stakeholders
• NV1 Security Clearance (mandatory)

Responsibilities

• Deliver advisory and consulting services across Federal Government departments.
• Apply deep expertise in cybersecurity risk, governance, policy and compliance within a government context.
• Collaborate with internal teams and clients to meet security objectives and ensure regulatory alignment.
• Support development of security policies and control implementations for government estates.

Job description

Job Description

DXC Technology (NYSE: DXC) is a leading enterprise technology and innovation partner delivering software, services, and solutions to global enterprises and public sector organisations — helping them harness AI to drive outcomes at a time of exponential change with speed. With deep expertise in Managed Infrastructure Services, Application Modernization, and Industry-Specific Software Solutions, DXC modernizes, secures, and operates some of the world’s most complex technology estates. Learn more on dxc.com

What You’ll Be Doing

You’ll work within our Cybersecurity team, delivering advisory and consulting services across Federal Government departments. This role requires deep expertise in cybersecurity risk, governance, policy, and compliance within a government context.

Essential Criteria

• 5+ years IT experience, including 2–4 years in Information Security, Risk, Audit or similar
• Bachelor’s or Master’s degree (or equivalent demonstrated experience)
• Strong knowledge of key security standards: PSPF, ISM, Essential 8, DSPF, ISO 27000, NIST CSF/800 series, CIS
• Experience advising internal teams and clients on security and compliance requirements
• Proven ability to write security policies and procedures aligned to ISM and PSPF
• Hands‑on experience implementing Essential 8 controls
• IRAP pre‑assessment and certification/accreditation experience
• Solid understanding of internet, application, web and network security
• Experience with OS security (Windows, Linux, etc.)
• Strong background in cybersecurity GRC
• Knowledge of risk management frameworks and methodologies
• Skilled in producing high‑quality technical documentation
• Ability to communicate effectively with technical and non-technical stakeholders
• NV1 Security Clearance (mandatory)

Desirable Criteria

• Experience supporting or mentoring a small team of security consultants
• Ability to uplift security assurance across government, business and vendor environments
• Strong capability in detecting, deterring and responding to cyber threats
• Technical writing capability
• IRAP Assessor (desirable but not essential)
• Working toward certifications such as CISSP, CISA, CISM, IRAP, GSEC

Our culture and benefits

DXC is committed to building better futures for our customers, colleagues, environment, and communities. We take care of each other and foster a culture of inclusion, belonging and corporate citizenship. We put this to action developing and implementing societal initiatives within our Social Impact Practice. #WeAreDXC

As an employer of choice, our “people first” philosophy means we offer competitive remuneration, benefits, training, and career opportunities that reflect our commitment to improving the lives of our employees, and the communities in which we live and work.

We are an Equal Opportunity Employer

DXC is proud to be an equal opportunity employer and we welcome submissions from people from all walks of life. We celebrate our diversity and recognise it is the unique contributions of our people that give us our edge. We stand by the ‘bring your whole-self to work’ philosophy. It is our inclusive culture that powers our results, and our company grows only if our people grow.

Accommodation of special needs for qualified candidates may be considered within the framework of the DXC Accommodation Policy. In addition, DXC Technology is committed to working with and providing reasonable accommodation to support qualified individuals with physical and mental disabilities.

At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in‑person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.