Senior Cyber Risk & Assurance Consultant

CSO Group; Sydney; On-site; AUD 120,000 - 180,000; Full time

Job summary

CSO Group in Sydney, Australia seeks a Senior Security Consultant to guide clients through cyber risk management, identify gaps, and develop governance aligned with industry standards and regulations.

You will lead risk assessments, oversee security assurance projects, help implement ISMS, and advise on security controls and roadmaps, while maintaining strong client relationships in a fast-paced consulting environment.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field.
• Industry certifications such as CISSP, CISM, CISA are highly desirable

Responsibilities

• Conduct comprehensive risk assessments to identify cyber threats, vulnerabilities and impacts, and develop tailored mitigation strategies.
• Lead and oversee security assurance projects to ensure regulatory compliance and alignment with ISO 27001, CPS234, and related standards.
• Develop and operationalise security control frameworks and ISMS aligned to business objectives and regulatory requirements.
• Assist organisations in managing supply chain risk through policies and governance artefacts.
• Maintain up-to-date knowledge of cybersecurity laws and regulations and advise clients on changes to achieve ongoing compliance.

Skills

Cybersecurity risk management

Security assurance

Threat modelling

Vulnerability management

Security architecture

Cloud security

Communication skills

Mentoring

Time management

Education

Bachelor's degree in Computer Science or Information Security

CISSP

CISM

CISA

Job description

CSO Group in Sydney, Australia seeks a Senior Security Consultant to guide clients through cyber risk management, identify gaps, and develop governance aligned with industry standards and regulations.

You will lead risk assessments, oversee security assurance projects, help implement ISMS, and advise on security controls and roadmaps, while maintaining strong client relationships in a fast-paced consulting environment.