Senior GRC Consultant: Lead Cyber Risk & Compliance

CyberCX; Canberra; Hybrid; AUD 120,000 - 150,000; Full time

Benefits offered by this job

Flexible hybrid working

Retail & lifestyle discounts

Career development opportunities

Impactful consulting work

Job summary

CyberCX is seeking a Senior Consultant to lead complex governance, risk and compliance engagements and guide clients through security uplift. You will drive ISMS implementations, audits, and risk assessments across commercial and government sectors.

With a strong audit background and hands-on PCI DSS experience, you’ll deliver clear reports to executives and technical audiences, mentor teammates, and help grow Australia’s leading cyber consulting team in a flexible hybrid environment.

Qualifications

• 3+ years of cyber security experience with emphasis on governance, risk & compliance.
• Strong audit background with hands-on security audits or compliance work.
• Experience with PCI DSS assessments and readiness activities.
• Knowledge of ISO 27001, NIST CSF, CIS Controls and Essential Eight.
• Excellent written and verbal communication for executives and technical audiences.

Responsibilities

• Lead information security engagements (ISMS implementations, audits, risk assessments) and advise clients on security uplift.
• Conduct and support security audits and readiness activities (PCI DSS and similar).
• Prepare clear, tailored reports and recommendations for executives and technical teams.
• Partner with clients to identify opportunities, design improvements, and drive cyber uplift initiatives.
• Mentor junior consultants and contribute to GRC practice maturity.

Skills

Security auditing

PCI DSS

ISO 27001

NIST CSF

CIS Controls

Essential Eight

GRC concepts

Stakeholder communication

Job description

CyberCX is seeking a Senior Consultant to lead complex governance, risk and compliance engagements and guide clients through security uplift. You will drive ISMS implementations, audits, and risk assessments across commercial and government sectors.

With a strong audit background and hands-on PCI DSS experience, you’ll deliver clear reports to executives and technical audiences, mentor teammates, and help grow Australia’s leading cyber consulting team in a flexible hybrid environment.