GRC Security Advisor: Risk, Compliance & Governance

Accenture Global; Canberra; On-site; AUD 90,000 - 125,000; Full time

Benefits offered by this job

18 weeks paid parental leave

Long & short-term career break

Structured career development program

Local and international career options

Family Inclusive Workplace

Flexible Work Arrangements

Diversity & Inclusion initiatives

Job summary

Accenture is seeking a Security Governance, Risk & Compliance (GRC) consultant in Canberra to perform security risk management and assurance across systems and applications, aligning with Australian government frameworks.

You will work with security leads, architects, and project teams to drive authorisation lifecycle activities, ensure compliance with PSPF, Essential 8, ISM and NIST, and contribute to the organisation’s security posture.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, or related field.
• Certifications such as CISM, CRISC, CISSP, IRAP Assessor, or equivalent security accreditation experience preferred.

Responsibilities

• Conduct risk assessments to identify, evaluate and mitigate security risks across projects and environments.
• Prepare and present high-quality reports detailing security issues and recommendations.
• Assist in ongoing monitoring of controls for audits and compliance.
• Develop and maintain security policies, procedures and plans.
• Liaise with authorising officers and project teams to ensure assessments meet standards.
• Provide security advisory on PSPF, Essential Eight, ISM and other Australian Government frameworks.

Skills

GRC governance

Security risk assessment

Govt security frameworks

Reporting & documentation

Education

Bachelor’s degree in Cybersecurity or related field

Job description

Accenture is seeking a Security Governance, Risk & Compliance (GRC) consultant in Canberra to perform security risk management and assurance across systems and applications, aligning with Australian government frameworks.

You will work with security leads, architects, and project teams to drive authorisation lifecycle activities, ensure compliance with PSPF, Essential 8, ISM and NIST, and contribute to the organisation’s security posture.