Lead Cyber Security Adviser — GRC & Risk (Hybrid)

Balance Recruitment and Balance Consulting; Sydney; Hybrid; AUD 140,000 - 200,000; Full time

Job summary

Balance Consulting Services in Australia seeks a Lead Cyber Security Adviser to strengthen government services by providing strategic and operational cyber security guidance, leading governance, risk and compliance activities, and helping stakeholders apply practical security controls in a complex environment.

The role is available across Canberra, Brisbane, Melbourne, Sydney or Adelaide on a 12‑month contract.

Qualifications

• Experience in governance, risk and compliance (GRC).
• Knowledge of PSPF, ISM, Essential Eight and NIST.
• Experience with security risk assessments and SSPs.
• Familiarity with network, endpoint and application security controls.
• Ability to lead stakeholder relationships and advise on complex matters.
• Experience with GRC tools like Archer IRM and SIEM platforms.

Responsibilities

• Develop and review security policies, guidelines and procedures.
• Identify and prioritize cyber risks; recommend mitigations.
• Lead risk assessments and assurance reviews for apps, websites and processes.
• Review designs and controls to identify vulnerabilities.
• Prepare for audits by monitoring compliance with standards.
• Assess third‑party software and vendors against baselines.
• Advise on security features of ICT products and resolve complex inquiries.
• Help stakeholders embed security standards across policies.
• Promote security awareness and communicate risk trends.
• Manage team operations, resources and workflows to deliver outcomes.

Skills

GRC governance

Stakeholder management

Security risk assessments

Security controls

Cloud platforms (Azure/AWS/GCP)

SIEM experience

AI security training

Tools

Archer IRM

Rapid7

Tenable

Microsoft Defender

Microsoft Sentinel

IAM

Azure

AWS

GCP

Job description

Balance Consulting Services in Australia seeks a Lead Cyber Security Adviser to strengthen government services by providing strategic and operational cyber security guidance, leading governance, risk and compliance activities, and helping stakeholders apply practical security controls in a complex environment.

The role is available across Canberra, Brisbane, Melbourne, Sydney or Adelaide on a 12‑month contract.