GRC InfoSec Consultant - ISMS & Compliance

Morrisec Pty Ltd.; Sydney; On-site; AUD 120,000 - 180,000; Full time

Job summary

Morrisec Pty Ltd. in Sydney, NSW, is seeking an Information Security GRC Consultant to strengthen clients' governance, risk and compliance programs.

You'll assess security controls, draft policies, support ISMS implementations, and liaise with stakeholders to deliver clear findings and roadmaps.

This full-time role offers the chance to work across standards like ISO 27001 and NIST, with a hands-on approach to improving data protection and regulatory compliance.

Qualifications

• Strong knowledge of ISMS frameworks and practices.
• Experience in Cybersecurity and Network Security.
• Understanding of data privacy regulations and controls.
• GRC activities including risk assessment and policy design.
• Familiar with ISO 27001, NIST, privacy laws.
• Strong analytical, documentation and report-writing skills.
• Excellent communication and stakeholder engagement abilities.

Responsibilities

• Assess and enhance clients' governance, risk, and compliance frameworks.
• Perform risk assessments and align to standards/regulations.
• Prepare recommendations and roadmaps for improvement.
• Draft and review security policies and support ISMS implementation.
• Communicate findings, deliver reports, and support audits.
• Drive continuous improvement initiatives with clients.

Skills

ISMS frameworks knowledge

Cybersecurity & Network Security

Data Privacy requirements

GRC activities

Standards & regulations familiarity

Analytical, documentation & reporting

Communication & stakeholder engagement

Job description

Morrisec Pty Ltd. in Sydney, NSW, is seeking an Information Security GRC Consultant to strengthen clients' governance, risk and compliance programs.

You'll assess security controls, draft policies, support ISMS implementations, and liaise with stakeholders to deliver clear findings and roadmaps.

This full-time role offers the chance to work across standards like ISO 27001 and NIST, with a hands-on approach to improving data protection and regulatory compliance.