GRC Practice Lead & vCISO Strategy Advisor

blueAPACHE; Sydney; Hybrid; AUD 180,000 - 240,000; Full time

Benefits offered by this job

Health insurance discount

Discounts on products

Employee Assistance Program

Ongoing training and certifications

Hardware and laptops provided

Employee referral program

Annual blueSTAR travel experiences

Job summary

blueAPACHE, an Australian MSP, seeks a Practice Lead for Governance, Risk and Compliance to lead a growing, subscription-based vCISO and advisory service. You will shape the GRC strategy, own customer outcomes, and drive growth across mid-market and enterprise clients.

Drive governance programs, collaborate with executives, boards and risk committees, and mentor a team of security professionals while aligning with blueAPACHE’s broader managed services strategy.

Qualifications

• Significant experience in information security governance, cyber risk, compliance or security advisory services.
• Experience leading a GRC, cyber advisory, consulting or professional services function.
• Experience providing CISO or vCISO services to customers.
• Strong knowledge of cyber governance, risk, controls and assurance environments.
• Experience developing security strategies, risk registers and maturity roadmaps.
• Experience advising executives, boards or risk committees.

Responsibilities

• Define and execute the GRC practice strategy, priorities and growth plan.
• Manage revenue, margin, utilisation and service delivery for the practice.
• Own the design and delivery of fractional vCISO services.
• Establish governance structures, risk registers and executive reporting for customers.
• Lead, coach and develop GRC consultants and advisors.
• Partner with Sales to qualify opportunities and articulate customer value.
• Ensure quality, compliance and timely delivery of all practice outputs.

Skills

GRC governance

Cyber risk

Security advisory

Executive communication

Stakeholder management

Leadership

Budgeting & forecasting

Consulting leadership

Education

Tertiary qualifications in information security

Job description

blueAPACHE, an Australian MSP, seeks a Practice Lead for Governance, Risk and Compliance to lead a growing, subscription-based vCISO and advisory service. You will shape the GRC strategy, own customer outcomes, and drive growth across mid-market and enterprise clients.

Drive governance programs, collaborate with executives, boards and risk committees, and mentor a team of security professionals while aligning with blueAPACHE’s broader managed services strategy.