GRC Security Lead – Risk, Compliance & A&A

Accenture; City of Melbourne; On-site; AUD 120,000 - 150,000; Full time

Benefits offered by this job

Flexible work arrangements

Career development program

Diversity & Inclusion initiatives

Job summary

Accenture Australia is seeking an experienced Security Assessment and Authorisation (A&A) consultant to lead security risk management and assurance activities across systems, applications and third‑party services. You will ensure systems meet security standards, obtain and maintain Authorisation to Operate (ATO), and guide stakeholders through the A&A lifecycle.

Working with system owners, architects and cyber security specialists, you will apply ISM, RMF and Essential Eight controls,

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, or related field.
• Certifications such as CISM, CRISC, CISSP, IRAP Assessor, or equivalent security accreditation experience preferred.
• Strong understanding of Australian PSPF and ISM cybersecurity principles and NIST guidelines.
• Experience with security documentation (Accreditation packages).

Responsibilities

• Conduct risk assessments to identify, evaluate, and mitigate security risks across projects and operational environments.
• Facilitate risk workshops with stakeholders to capture and validate security risks.
• Monitor and report on risk status, treatment progress, and residual risk to governance forums.
• Execute system security authorisation processes in accordance with ISM and RMF steps.
• Prepare and maintain risk assessments, and accreditation documentation.
• Ensure compliance with security controls for governance, identification, protection, detection, and response functions.

Skills

Security risk management

A&A lifecycle

Stakeholder engagement

Documentation & accreditation

GRC tooling familiarity

Education

Bachelor's degree in Cybersecurity, IT, or related field

Certifications such as CISM, CRISC, CISSP, IRAP Assessor

Tools

SharePoint

Confluence

Job description

Accenture Australia is seeking an experienced Security Assessment and Authorisation (A&A) consultant to lead security risk management and assurance activities across systems, applications and third‑party services. You will ensure systems meet security standards, obtain and maintain Authorisation to Operate (ATO), and guide stakeholders through the A&A lifecycle.

Working with system owners, architects and cyber security specialists, you will apply ISM, RMF and Essential Eight controls,