Senior GRC and Advisory Consultant

DXC Technology Morocco; Canberra; Sur place; AUD 140 000 - 180 000; Plein temps

Résumé du poste

DXC Technology invites a senior cybersecurity professional to lead governance, risk, compliance and assurance across Australian Federal Government engagements. You will shape policy, drive essential security controls, and mentor a team of consultants. Strong communication with CISO-level stakeholders is essential.

With 8+ years in IT and 5+ years in information security, you will apply PSPF/ISM knowledge and manage end-to-end accreditation programs, including IRAP considerations.

Qualifications

• 8+ years IT experience, including 5+ years in Information Security, GRC, Risk or Audit.
• Deep knowledge of PSPF, ISM, Essential 8, DSPF, ISO 27000, NIST CSF/800 series, and CIS.
• Policy writing aligned to ISM/PSPF; hands-on Essential 8 implementation.

Responsabilités

• Lead governance, risk, compliance and assurance services across Federal Government departments.
• Engage senior government stakeholders and executive audiences (CISO-level and above).
• Mentor junior security consultants and deliver strategic security outcomes.

Connaissances

IT governance

Risk management

Policy writing

GRC leadership

Security architectures

Board-level briefings

Mentoring

IRAP familiarity

CISSP/CISA/CISM

Formation

Bachelor’s or Master’s degree

Description du poste

Job Description:DXC Technology (NYSE: DXC) is a leading enterprise technology and innovation partner delivering software, services, and solutions to global enterprises and public sector organisations — helping them harness AI to drive outcomes at a time of exponential change with speed. With deep expertise in Managed Infrastructure Services, Application Modernization, and Industry-Specific Software Solutions, DXC modernizes, secures, and operates some of the world’s most complex technology estates. Learn more on dxc.comWhat You’ll Be DoingYou’ll take a senior advisory role within our Cybersecurity team, leading the delivery of governance, risk, compliance, and assurance services across Federal Government departments. This role requires deep expertise in cybersecurity risk, governance, policy, and compliance within a government context, along with the ability to lead engagements and mentor junior consultants.Essential Criteria8+ years IT experience, including 5+ years in Information Security, GRC, Risk or AuditBachelor’s or Master’s degree (or equivalent experience)Deep knowledge of PSPF, ISM, Essential 8, DSPF, ISO 27000, NIST CSF/800 series, and CISProven track record leading GRC engagements and delivering strategic security outcomesStrong policy writing skills aligned to ISM and PSPF; hands-on Essential 8 implementation and maturity assessmentIRAP Assessor experience (or actively pursuing)Ability to engage senior government stakeholders and executive audiences (CISO-level and above)Experience mentoring and leading security consultantsSolid understanding of network, application, web, and OS security (Windows, Linux)Skilled in producing technical documentation and board-level briefingsNV1 Security Clearance highly desirableDesirable CriteriaCurrent CISSP, CISA, CISM, or IRAP Assessor certificationExperience with ACSC reporting and government incident response frameworksAbility to drive security assurance and accreditation programs end-to-endExperience contributing to RFP/tender responses for cybersecurity servicesExposure to cloud security governance (AWS, Azure, GovCloud)Strong capability in detecting, deterring and responding to cyber threatsTechnical writing capability for executive and board-level audiencesOur Culture and BenefitsDXC is committed to building better futures for our customers, colleagues, environment, and communities. We take care of each other and foster a culture of inclusion, belonging and corporate citizenship. We put this to action developing and implementing societal initiatives within our Social Impact Practice. #WeAreDXCAs an employer of choice, our “people first” philosophy means we offer competitive remuneration, benefits, training, and career opportunities that reflect our commitment to improving the lives of our employees, and the communities in which we live and work.How to Apply & Our Commitment to You in ReturnIf you would like to be part of a culture that drives innovation, delivers results, rewards performance and encourages ideas, then please press the \"Apply Now\" button to submit your resume.In return, we agree to ensure a hiring process that is enjoyable, thorough, and fair. We strive to provide an environment that lets you thrive and show off the very best version of yourself, while learning about us at the same time.We Are an Equal Opportunity EmployerDXC is proud to be an equal opportunity employer and we welcome submissions from people from all walks of life. We celebrate our diversity and recognise it is the unique contributions of our people that give us our edge. We stand by the ‘bring your whole-self to work’ philosophy. It is our inclusive culture that powers our results, and our company grows only if our people grow.Accommodation of special needs for qualified candidates may be considered within the framework of the DXC Accommodation Policy. In addition, DXC Technology is committed to working with and providing reasonable accommodation to support qualified individuals with physical and mental disabilities.At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf.