GRC Consultant

CyberCX; Australia; On-site; AUD 90,000 - 130,000; Full time

Job summary

CyberCX is Australia and New Zealand’s leading cyber security services provider, delivering end-to-end capabilities across advisory, governance, risk, incident response and more. We are seeking a GRC Consultant to join MDTs and help clients identify, protect, detect, respond, and recover from threats.

You will support complex governance, risk and compliance projects for a diverse client base and contribute to the development of SRMPs and SSPs, ensuring documentation is robust and audit-ready.

Qualifications

• Broad knowledge of compliance frameworks (ISO 27001, PCI DSS, NIST, GDPR) and related security controls.
• Desirable ISM, Essential Eight, DSPF, PSPF experience.
• Defence/Defence Industry exposure preferred.
• Proven ability to develop SRMPs and SSPs and supporting documentation.
• Minimum 12 months handling diverse IT & Communications projects.

Responsibilities

• Support complex cyber security projects in Governance, Risk and Compliance.
• Assist clients in identifying and managing cyber security risk.
• Develop, implement and maintain Security SRMPs, SSPs and related documentation; support certification and accreditation.
• Maintain and improve the system security documentation package.

Skills

GRC frameworks

ISM/Essential Eight

Defence industry

Security documentation

NV1 clearance

Job description

Join Australia's leading cyber security services organisation. You will deliver cutting edge cyber projects for world class clients.

17th August, 2026

About CyberCX

CyberCX is Australia and New Zealand’s leading cyber security services provider, trusted by private and public sector organisations to help manage cyber risk, respond to incidents, and build resilience in an increasingly complex threat landscape.

With a workforce of over 1,400 professionals, CyberCX delivers end-to-end cyber capabilities across consulting and advisory, governance, risk and compliance, incident response, penetration testing, cloud and infrastructure solutions, identity and access management, and managed security services.

About the role

As a GRC Consultant, you’ll have the opportunity to work in Multi-Disciplinary Teams (MDT) that cover our end-to-end services, solving our clients most challenging cyber security problems across diverse technology environments. You’ll help our clients proactively Identify, Protect, Detect, Respond, and Recover from threats.

What You'll Do

• Support complex, cyber security projects in the Governance, Risk and Compliance domain
• Work with our customer base to assist them in identifying and effectively managing cyber security risk.
• Develop, implement and maintain the Security SRMP, SSP’s, SRAs (assist with) documentation, supporting certification and accreditation for the service being delivered.
• Maintain and improve the system security documentation package.

What You'll Bring

• Broad knowledge across a range of compliance frameworks (ISO 27001, PCI DSS, NIST, GDPR, etc.)
• Experience with ISM, Essential Eight, DSPF, or PSPF is highly desirable.
• Experience working with Defence or the Defence Industry preferred
• Demonstrated experience in developing security documentation such as Security Risk Management Plans (SRMP), and System Security Plans (SSP).
• Minimum 12 months of experience dealing with a diverse range of Information Technology & Communications projects or challenges.
• Experience with the ISM or implementing and/or auditing an ISO 27001 ISMS.
• Networks and Systems Administrators who have experience in implementation of complex systems wishing to shift focus to GRC.

Due to the nature of the work, anNV1clearance is required.

Why CyberCX?

• Joining CyberCX means being part of a passionate, purpose-driven team working to make Australia and New Zealand the safest places to connect online. You’ll enjoy:
• Access to industry-leading experts and professional development opportunities.
• A supportive, flexible, and collaborative workplace culture.
• Competitive salary and benefits package.

Ready to make an impact?