GRC Cyber Lead: Vulnerability Risk & Governance

XPT Software; Melbourne; On-site; AUD 150,000 - 230,000; Full time

Job summary

XPT Software Australia PTY Ltd is seeking an experienced GRC Consultant – Cyber Lead to drive governance and maturity of non-OS vulnerability management across enterprise environments. You will oversee cyberrisk, exception management, and remediation strategy while ensuring compliance with security standards.

The role focuses on risk assessment, governance, and collaboration with delivery teams to align with business risk appetite and secure-by-design practices.

Qualifications

• GRC and cyber risk expertise.
• Experience with non-OS vulnerabilities.
• Knowledge of ISO 27001, NIST, CIS.
• Hands-on with Qualys, Tenable, Snyk.
• Strong stakeholder engagement.

Responsibilities

• Define non-OS vulnerability management frameworks and standards.
• Establish governance forums and escalation paths.
• Ensure regulatory and enterprise security compliance.
• Manage remediation exceptions and risk acceptance.
• Drive risk-based treatment plans with app and platform teams.
• Promote secure-by-design and DevSecOps practices.
• Oversee remediation outcomes from pen tests and audits.

Skills

GRC & cyber risk

Vulnerability management

Non-OS vulnerabilities

ISO27001 / NIST

Security tooling

DevSecOps

Stakeholder engagement

Education

Bachelor's in IT/Cybersecurity

Tools

Qualys

Tenable

Snyk

Job description

XPT Software Australia PTY Ltd is seeking an experienced GRC Consultant – Cyber Lead to drive governance and maturity of non-OS vulnerability management across enterprise environments. You will oversee cyberrisk, exception management, and remediation strategy while ensuring compliance with security standards.

The role focuses on risk assessment, governance, and collaboration with delivery teams to align with business risk appetite and secure-by-design practices.