GRC Technical Advisor

Decipher Bureau; Brisbane; On-site; AUD 192,000 - 251,000; Full time

Job summary

Decipher Bureau in Brisbane is recruiting a GRC Technical Advisor for a 3-month contract with a Queensland Government department. The role focuses on strengthening information security governance, reviewing ISMS controls, and driving remediation across IS18 and ISO 27001 alignment.

You will work with internal stakeholders to conduct risk assessments, update policies, maintain risk registers, and deliver practical recommendations to raise the department's security maturity and compliance posture.

Qualifications

• Experience in a Cybersecurity GRC role.
• Hands-on ISMS remediation experience.
• Knowledge of IS18 policy.
• Understanding of ISO 27001 and implementation.
• Experience conducting risk assessments.
• Experience supporting audits and corrective actions.
• Strong governance and risk treatment knowledge.

Responsibilities

• Review ISMS for gaps and improvements.
• Drive remediation and address audit findings.
• Conduct cybersecurity risk assessments across assets.
• Assess controls against IS18 and ISO 27001 requirements.
• Develop remediation plans and risk treatment strategies.
• Review/update information security policies and ISMS docs.
• Support ongoing ISMS maintenance and improvements.
• Maintain risk registers and compliance reporting.
• Provide technical GRC advice to improve governance.
• Collaborate with technical teams and governance functions.
• Prepare reports outlining risks and actions.
• Support enhancements to cybersecurity maturity and compliance.

Skills

GRC

ISMS

IS18

ISO 27001

Risk assessments

Audit support

Stakeholder engagement

Delivery focus

Job description

Our client is a central Queensland Government department responsible for supporting government priorities, strategic policy development and the delivery of outcomes across the Queensland public sector. Operating within a complex government environment, the department works closely with government agencies and stakeholders to support effective governance, strategic decision-making and the delivery of key initiatives. With a continued focus on strengthening its information security posture, the organisation is seeking an experienced GRC Technical Advisor to support its cybersecurity governance, risk and compliance activities. This engagement will focus on improving the department's Information Security Management System (ISMS), addressing identified control gaps and ensuring alignment with Queensland Government information security requirements and recognised industry standards.

The Role

As a GRC Technical Advisor, you'll play a key role in strengthening the department's information security governance and compliance position. This is a hands-on, delivery-focused contract where you'll review existing security controls, assess compliance gaps and drive practical remediation activities across the Information Security Management System (ISMS). Working closely with internal stakeholders, you'll conduct information security risk assessments, support IS18 and ISO 27001 alignment, and develop practical recommendations to improve the department's security maturity.

Key Responsibilities

• Review the existing Information Security Management System (ISMS), identifying control gaps, compliance deficiencies and areas requiring improvement.
• Drive ISMS remediation activities, addressing outstanding requirements, audit findings and information security control weaknesses.
• Conduct cybersecurity and information security risk assessments across business systems, processes and information assets.
• Assess existing security controls against Queensland Government Information Security Policy (IS18) and ISO 27001 requirements.
• Identify compliance gaps and develop practical remediation plans and risk treatment strategies.
• Review, develop and improve information security policies, standards, procedures and supporting ISMS documentation.
• Support the ongoing implementation, maintenance and continuous improvement of the department's ISMS.
• Maintain and contribute to risk registers, risk assessments, control documentation and compliance reporting.
• Provide technical GRC advice and recommendations to improve information security governance and risk management practices.
• Work collaboratively with technical teams, business stakeholders and governance functions to progress remediation activities.
• Prepare reports and supporting documentation outlining identified risks, control deficiencies and recommended actions.
• Support improvements to the department's overall cybersecurity maturity and compliance posture.

What You'll Bring

• Demonstrated experience in a Cybersecurity GRC, Information Security or Cyber Risk Advisory role.
• Strong hands-on experience managing, reviewing or remediating an Information Security Management System (ISMS).
• Demonstrated knowledge of Queensland Government Information Security Policy (IS18).
• Strong understanding of ISO 27001, including ISMS requirements, security controls, compliance and continuous improvement.
• Experience conducting information security and cybersecurity risk assessments.
• Proven ability to identify control deficiencies, assess compliance gaps and drive remediation activities through to completion.
• Experience supporting internal or external audits, including addressing audit findings and implementing corrective actions.
• Strong understanding of information security governance, policies, standards and risk treatment processes.
• Ability to develop and maintain risk registers, remediation plans and supporting compliance documentation.
• Strong stakeholder engagement skills, with the ability to communicate technical security requirements to both technical and non-technical audiences.
• A practical, delivery-oriented approach with the ability to work independently and achieve outcomes within tight timeframes.

Previous experience within Queensland Government or another public-sector environment will be highly regarded. Relevant certifications such as ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, CISM, CRISC or CISSP will also be advantageous.

What's in It for You?

• $1200 per day inclusive of superannuation
• Initial 3- month contract with a major Queensland Government department.
• Brisbane CBD location at 1 William Street.
• Ideally five days per week onsite, providing close collaboration with internal stakeholders.
• Opportunity to contribute to meaningful information security uplift within the Queensland public sector.
• Take ownership of ISMS remediation, risk assessments and compliance improvement activities.
• Work across recognised security frameworks, including IS18 and ISO 27001.
• Opportunity to deliver tangible outcomes and strengthen the department's information security maturity.

Setting the Scene

Our client is a central Queensland Government department responsible for supporting government priorities, strategic policy development and the delivery of outcomes across the Queensland public sector. Operating within a complex government environment, the department works closely with government agencies and stakeholders to support effective governance, strategic decision-making and the delivery of key initiatives. With a continued focus on strengthening its information security posture, the organisation is seeking an experienced GRC Technical Advisor to support its cybersecurity governance, risk and compliance activities. This engagement will focus on improving the department's Information Security Management System (ISMS), addressing identified control gaps and ensuring alignment with Queensland Government information security requirements and recognised industry standards.

The Role

As a GRC Technical Advisor, you'll play a key role in strengthening the department's information security governance and compliance position. This is a hands-on, delivery-focused contract where you'll review existing security controls, assess compliance gaps and drive practical remediation activities across the Information Security Management System (ISMS). Working closely with internal stakeholders, you'll conduct information security risk assessments, support IS18 and ISO 27001 alignment, and develop practical recommendations to improve the department's security maturity.

Key Responsibilities

• Review the existing Information Security Management System (ISMS), identifying control gaps, compliance deficiencies and areas requiring improvement.
• Drive ISMS remediation activities, addressing outstanding requirements, audit findings and information security control weaknesses.
• Conduct cybersecurity and information security risk assessments across business systems, processes and information assets.
• Assess existing security controls against Queensland Government Information Security Policy (IS18) and ISO 27001 requirements.
• Identify compliance gaps and develop practical remediation plans and risk treatment strategies.
• Review, develop and improve information security policies, standards, procedures and supporting ISMS documentation.
• Support the ongoing implementation, maintenance and continuous improvement of the department's ISMS.
• Maintain and contribute to risk registers, risk assessments, control documentation and compliance reporting.
• Provide technical GRC advice and recommendations to improve information security governance and risk management practices.
• Work collaboratively with technical teams, business stakeholders and governance functions to progress remediation activities.
• Prepare reports and supporting documentation outlining identified risks, control deficiencies and recommended actions.
• Support improvements to the department's overall cybersecurity maturity and compliance posture.

What You'll Bring

• Demonstrated experience in a Cybersecurity GRC, Information Security or Cyber Risk Advisory role.
• Strong hands-on experience managing, reviewing or remediating an Information Security Management System (ISMS).
• Demonstrated knowledge of Queensland Government Information Security Policy (IS18).
• Strong understanding of ISO 27001, including ISMS requirements, security controls, compliance and continuous improvement.
• Experience conducting information security and cybersecurity risk assessments.
• Proven ability to identify control deficiencies, assess compliance gaps and drive remediation activities through to completion.
• Experience supporting internal or external audits, including addressing audit findings and implementing corrective actions.
• Strong understanding of information security governance, policies, standards and risk treatment processes.
• Ability to develop and maintain risk registers, remediation plans and supporting compliance documentation.
• Strong stakeholder engagement skills, with the ability to communicate technical security requirements to both technical and non-technical audiences.
• A practical, delivery-oriented approach with the ability to work independently and achieve outcomes within tight timeframes.

Previous experience within Queensland Government or another public-sector environment will be highly regarded. Relevant certifications such as ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, CISM, CRISC or CISSP will also be advantageous.

What's in It for You?

• $1200 per day inclusive of superannuation
• Initial 3- month contract with a major Queensland Government department.
• Brisbane CBD location at 1 William Street.
• Ideally five days per week onsite, providing close collaboration with internal stakeholders.
• Opportunity to contribute to meaningful information security uplift within the Queensland public sector.
• Take ownership of ISMS remediation, risk assessments and compliance improvement activities.
• Work across recognised security frameworks, including IS18 and ISO 27001.
• Opportunity to deliver tangible outcomes and strengthen the department's information security maturity.

Additional information

• Lead ISMS remediation and cyber risk assessments
• Strengthen security controls in line with IS18 and ISO 27001
• Initial 3-month contract | $1,200/ day inc super | Brisbane CBD