Information Security GRC Consultant

Morrisec; Sydney; On-site; AUD 120,000 - 180,000; Full time

Job summary

Morrisec Pty Ltd. in Sydney, NSW, is seeking an Information Security GRC Consultant to strengthen clients' governance, risk and compliance programs.

You'll assess security controls, draft policies, support ISMS implementations, and liaise with stakeholders to deliver clear findings and roadmaps.

This full-time role offers the chance to work across standards like ISO 27001 and NIST, with a hands-on approach to improving data protection and regulatory compliance.

Qualifications

• Strong knowledge of ISMS frameworks and practices.
• Experience in Cybersecurity and Network Security.
• Understanding of data privacy regulations and controls.
• GRC activities including risk assessment and policy design.
• Familiar with ISO 27001, NIST, privacy laws.
• Strong analytical, documentation and report-writing skills.
• Excellent communication and stakeholder engagement abilities.

Responsibilities

• Assess and enhance clients' governance, risk, and compliance frameworks.
• Perform risk assessments and align to standards/regulations.
• Prepare recommendations and roadmaps for improvement.
• Draft and review security policies and support ISMS implementation.
• Communicate findings, deliver reports, and support audits.
• Drive continuous improvement initiatives with clients.

Skills

ISMS frameworks knowledge

Cybersecurity & Network Security

Data Privacy requirements

GRC activities

Standards & regulations familiarity

Analytical, documentation & reporting

Communication & stakeholder engagement

Job description

Company Description

Morrisec specializes in designing tailored security strategies and services that align with each organization’s unique threat landscape, risk profile, and strategic objectives. The company leverages extensive experience and a risk-based methodology to help clients address critical cybersecurity risks and meet complex compliance obligations. By integrating security with business priorities, Morrisec supports sustainable growth and resilience. Team members collaborate closely with clients to deliver practical, outcomes-focused security solutions.

Role Description

The Information Security GRC Consultant is a full time position based in Sydney, NSW. The consultant will assess and enhance clients’ governance, risk, and compliance frameworks, including policies, controls, and processes across information security and data protection. Day-to-day activities include performing risk assessments, aligning clients to relevant standards and regulations, and preparing recommendations and roadmaps for improvement. The role involves drafting and reviewing security policies, supporting implementation of information security management systems, and advising on compliance with data privacy and cybersecurity requirements. The consultant will work closely with client stakeholders to communicate findings, deliver reports, and support audits and continuous improvement initiatives.

Qualifications

• Strong knowledge of Information Security Management System (ISMS) frameworks and broader Information Security Management practices.
• Experience in Cybersecurity and Network Security, including understanding of common threats, vulnerabilities, and control measures.
• Competence in Data Privacy requirements and regulations, with the ability to translate legal and regulatory obligations into practical controls.
• Experience in Governance, Risk, and Compliance (GRC) activities, such as risk assessment, control design, policy development, and audit support.
• Familiarity with relevant standards and regulations (e.g., ISO 27001, NIST frameworks, privacy legislation) and their practical application.
• Strong analytical, documentation, and report-writing skills, with attention to detail and accuracy.
• Effective communication and stakeholder engagement skills, with the ability to present technical concepts in clear, accessible language.
• Willingness to get involved in a company culture that dresses up for Halloween, goes on rides at Luna Park, and team building exercises such as pottery.