GRC Consultant

Cyber Ally; Sydney; Ibrido; AUD 90.000 - 120.000; Tempo pieno

Descrizione del lavoro

Cyber Ally is hiring a GRC Consultant to deliver ISO 27001 and SOC 2 programs in an AI-native environment. You will develop policies, perform risk and control assessments, and prepare customers for audits.

You will work with leadership to improve delivery models and drive efficient, high-quality outcomes for clients. Ideal candidates have 2–4 years in GRC or cybersecurity consulting, experience with ISO 27001/SOC 2, and strong writing skills.

Competenze

• 2–4 years of GRC or cybersecurity consulting experience.
• Practical ISO 27001 and/or SOC 2 experience.
• Understanding of controls, risk assessments, evidence and audits.
• Experience preparing or reviewing compliance documentation.
• Strong writing, attention to detail and ability to manage multiple customers.
• Demonstrated use of ChatGPT, Claude or similar AI tools.
• Curiosity and adaptability.

Mansioni

• Deliver GRC and compliance services for ISO 27001, SOC 2 and other frameworks.
• Conduct gap and risk assessments; review controls and evidence.
• Coordinate evidence collection and prepare for certification/audits.
• Operate AI-powered workflows and validate AI outputs for clients.
• Manage day-to-day compliance activities for assigned customers and communicate progress.

Conoscenze

GRC experience

Cybersecurity consulting

ISO 27001 experience

SOC 2 experience

Risk assessments

Audit preparation

Technical writing

AI tools proficiency

Strumenti

Vanta

GitHub

APIs

Descrizione del lavoro

We are looking for a GRC Consultant with approximately 2–4 years of experience who is excited about working in an AI-native environment. You will use AI-powered workflows for policy development, evidence collection, control assessments, gap analysis and audit preparation; validate outputs; solve complex issues; and help customers navigate their certification and audit journeys. You will work closely with leadership and contribute to improving our delivery model.

About Cyber Ally

Cyber Ally is a cybersecurity and compliance consultancy helping businesses achieve and maintain compliance with frameworks including ISO 27001, SOC 2 and ISO 42001. We are transforming how compliance services are delivered by combining experienced GRC professionals with agentic functions, automation and modern technology. Our goal is to eliminate repetitive compliance administration so consultants can focus on sound judgment, meaningful security improvements and excellent customer outcomes.

Key Responsibilities

GRC and Compliance Delivery

• Support customers implementing and maintaining ISO 27001, SOC 2 and other frameworks.
• Conduct gap assessments, risk assessments and control reviews.
• Review and validate policies, procedures and compliance documentation.
• Coordinate evidence collection and assess evidence against requirements.
• Prepare customers for certification and assurance audits; liaise with auditors.
• Track compliance activities, risks and deadlines.

AI-Driven Delivery

• Operate AI agents and automated workflows for recurring compliance work.
• Review AI-generated outputs for accuracy, completeness and customer relevance.
• Identify opportunities to automate repetitive processes.
• Troubleshoot workflow issues and collaborate on improvements.
• Work with structured customer data, repositories and compliance platforms.

Customer Management

• Manage day-to-day compliance activities for assigned customers.
• Communicate progress, risks and outstanding requirements.
• Coordinate customer deliverables and timelines.
• Resolve routine issues independently and escalating complex matters.
• Maintain excellent customer communication and delivery quality.

What We're Looking For

• Approximately 2–4 years in GRC, cybersecurity consulting or a related field.
• Practical ISO 27001 and/or SOC 2 experience.
• Understanding of controls, risk assessments, evidence and audits.
• Experience preparing or reviewing compliance documentation.
• Strong writing, attention to detail and ability to manage multiple customers.
• Demonstrated professional use of ChatGPT, Claude or similar AI tools.
• Curiosity, technical confidence and adaptability.

Highly Desirable

• Hands-on experience with Vanta or a similar compliance automation platform.
• Familiarity with GitHub and version-controlled documentation.
• Understanding of APIs, integrations or MCP workflows.
• Experience with AI agents or workflow automation.
• ISO 42001 or AI governance exposure.
• Experience supporting customers through external certification audits.
• ISO 27001 Lead Implementer or Lead Auditor certification.

What Makes This Role Different

You are an AI-native GRC consultant, but you do not need to be a software engineer or build AI systems from scratch. Your value will come from judgment, problem-solving, customer engagement and ownership of outcomes, not the number of documents you manually produce.

What Success Looks Like in the First Three Months

• Learn Cyber Ally's methodology and AI workflows.
• Independently manage day-to-day activities for assigned customers.
• Identify and resolve issues in AI-generated outputs.
• Deliver work that needs minimal senior review.
• Suggest practical delivery improvements.

Why Join Cyber Ally?

• Work at the intersection of cybersecurity, compliance and AI.
• Gain hands‑on experience with emerging agentic technologies.
• Help shape a modern approach to GRC consulting.
• Work closely with experienced cybersecurity professionals.
• Own meaningful customer outcomes and develop AI-enabled delivery skills.

Location

This is a hybrid role based in Sydney, with regular time in our Sydney office.