Senior Consultant - GRC

CyberCX Pty Ltd; Australia; On-site; AUD 120,000 - 180,000; Full time

Benefits offered by this job

Flexible hybrid working

Retail discounts

Career development

Impactful consulting

Job summary

CyberCX Pty Ltd in Australia is seeking a Senior Consultant to lead complex GRC engagements and uplift clients' security postures. You will guide client programs through ISMS implementations, audits, and risk assessments, while mentoring junior consultants and shaping the growth of Australia's leading GRC practice.

With NV1 clearance, you’ll partner with government and enterprise clients to deliver practical cyber security improvements, report outcomes clearly, and drive uplift initiatives

Qualifications

• 3+ years' experience in cyber security, ideally with exposure across both commercial and government sectors.
• Strong audit background, with hands-on experience conducting or supporting security audits (internal, external, or compliance-focused).
• Experience with PCI DSS, including assessments, readiness activities, evidence collection, or remediation support.
• Solid working knowledge of key frameworks such as ISO 27001, NIST CSF, CIS Controls and the Essential Eight.
• High proficiency across GRC concepts and the ability to independently deliver complex consulting engagements.
• Excellent communication, stakeholder engagement and a solutions-focused mindset.

Responsibilities

• Lead information security engagements such as ISMS implementations and audits, cyber risk assessments, posture reviews, incident response readiness assessments, and the development of cyber security frameworks.
• Conduct and support security audits, including PCI DSS assessments and readiness activities.
• Prepare clear, tailored, high-quality reports and recommendations for both executive and technical audiences.
• Partner with clients to identify security opportunities, design improvements, and drive cyber uplift initiatives.
• Mentor consultants, contribute to team capability growth, and support the overall maturity of the GRC practice.

Skills

GRC concepts

Audits

PCI DSS

ISO 27001

NIST CSF

CIS Controls

Essential Eight

Stakeholder engagement

Consulting leadership

Tools

PCI DSS

Job description

Lead meaningful cyber projects, uplift client security, and grow your career with Australia's leading GRC consulting team.

07th August, 2026

About CyberCX

CyberCX is the leading independent cyber security services organisation in Australia and New Zealand. We bring together the region's most trusted cyber security companies to deliver end-to-end services to enterprise and government.

With 1400+ cyber security professionals across Australia, New Zealand, the UK and the US, we offer unmatched capability, deep expertise, and the opportunity to do meaningful work that helps secure our communities.

About the Role

Our Governance, Risk & Compliance (GRC) practice is growing rapidly, and we’re looking for experienced, customer-obsessed professionals who want to deliver meaningful cyber security outcomes.

As a Senior Consultant, you'll lead complex engagements, guide clients through security uplift, and contribute to the development of Australia's most capable cyber consulting team.

What You'll Do

• Lead information security engagements such as ISMS implementations and audits, cyber risk assessments, posture reviews, incident response readiness assessments, and the development of cyber security frameworks.
• Conduct and support security audits, including PCI DSS assessments and readiness activities.
• Prepare clear, tailored, high-quality reports and recommendations for both executive and technical audiences.
• Partner with clients to identify security opportunities, design improvements, and drive cyber uplift initiatives.
• Mentor consultants, contribute to team capability growth, and support the overall maturity of the GRC practice.

What You'll Bring

• 3+ years' experience in cyber security, ideally with exposure across both commercial and government sectors.
• Strong audit background, with hands-on experience conducting or supporting security audits (internal, external, or compliance-focused).
• Experience with PCI DSS, including assessments, readiness activities, evidence collection, or remediation support.
• Solid working knowledge of key frameworks such as ISO 27001, NIST CSF, CIS Controls and the Essential Eight.
• High proficiency across GRC concepts and the ability to independently deliver complex consulting engagements.
• Excellent communication, stakeholder engagement and a solutions-focused mindset.

Due to the nature of the work, NV1 clearance is required.

Why CyberCX

• Flexible hybrid working - balance your time between home and office.
• Retail & lifestyle discounts through our corporate partners.
• Unmatched career development within Australia and New Zealand's largest cyber community.
• Impactful consulting work across diverse industries, helping clients strengthen their security posture in a rapidly evolving cyber landscape.