Senior Consultant - GRC

CyberCX; Canberra; Hybrid; AUD 120,000 - 150,000; Full time

Benefits offered by this job

Flexible hybrid working

Retail & lifestyle discounts

Career development opportunities

Impactful consulting work

Job summary

CyberCX is seeking a Senior Consultant to lead complex governance, risk and compliance engagements and guide clients through security uplift. You will drive ISMS implementations, audits, and risk assessments across commercial and government sectors.

With a strong audit background and hands-on PCI DSS experience, you’ll deliver clear reports to executives and technical audiences, mentor teammates, and help grow Australia’s leading cyber consulting team in a flexible hybrid environment.

Qualifications

• 3+ years of cyber security experience with emphasis on governance, risk & compliance.
• Strong audit background with hands-on security audits or compliance work.
• Experience with PCI DSS assessments and readiness activities.
• Knowledge of ISO 27001, NIST CSF, CIS Controls and Essential Eight.
• Excellent written and verbal communication for executives and technical audiences.

Responsibilities

• Lead information security engagements (ISMS implementations, audits, risk assessments) and advise clients on security uplift.
• Conduct and support security audits and readiness activities (PCI DSS and similar).
• Prepare clear, tailored reports and recommendations for executives and technical teams.
• Partner with clients to identify opportunities, design improvements, and drive cyber uplift initiatives.
• Mentor junior consultants and contribute to GRC practice maturity.

Skills

Security auditing

PCI DSS

ISO 27001

NIST CSF

CIS Controls

Essential Eight

GRC concepts

Stakeholder communication

Job description

About CyberCX

CyberCX is the leading independent cyber security services organisation in Australia and New Zealand. We bring together the region’s most trusted cyber security companies to deliver end-to-end services to enterprise and government.

With 1400+ cyber security professionals across Australia, New Zealand, the UK and the US, we offer unmatched capability, deep expertise, and the opportunity to do meaningful work that helps secure our communities.

About The Role

Our Governance, Risk & Compliance (GRC) practice is growing rapidly, and we’re looking for experienced, customer-obsessed professionals who want to deliver meaningful cyber security outcomes.

As a Senior Consultant, you’ll lead complex engagements, guide clients through security uplift, and contribute to the development of Australia’s most capable cyber consulting team.

What You’ll Do

• Lead information security engagements such as ISMS implementations and audits, cyber risk assessments, posture reviews, incident response readiness assessments, and the development of cyber security frameworks.


• Conduct and support security audits, including PCI DSS assessments and readiness activities.


• Prepare clear, tailored, high-quality reports and recommendations for both executive and technical audiences.


• Partner with clients to identify security opportunities, design improvements, and drive cyber uplift initiatives.


• Mentor consultants, contribute to team capability growth, and support the overall maturity of the GRC practice.

What You’ll Bring

• 3+ years’ experience in cyber security, ideally with exposure across both commercial and government sectors.


• Strong audit background, with hands-on experience conducting or supporting security audits (internal, external, or compliance-focused).


• Experience with PCI DSS, including assessments, readiness activities, evidence collection, or remediation support.


• Solid working knowledge of key frameworks such as ISO 27001, NIST CSF, CIS Controls and the Essential Eight.


• High proficiency across GRC concepts and the ability to independently deliver complex consulting engagements.


• Excellent communication, stakeholder engagement and a solutions-focused mindset.

Due to the nature of the work,NV1 clearance is required.

Why CyberCX

• Flexible hybrid working – balance your time between home and office.


• Retail & lifestyle discounts through our corporate partners.


• Unmatched career development within Australia and New Zealand’s largest cyber community.


• Impactful consulting work across diverse industries, helping clients strengthen their security posture in a rapidly evolving cyber landscape.

We kindly request no agency submissions for this role. Unsolicited CV’s will not be accepted, and no fees will be payable.