Senior GRC & Cyber Advisory Consultant – Government

DXC Technology; Sydney; Hybrid; AUD 180,000 - 260,000; Full time

Benefits offered by this job

Competitive remuneration

Training & career opportunities

Flexible work model

Inclusive culture

Job summary

DXC Technology is seeking a senior cybersecurity advisor to lead governance, risk, compliance, and assurance services across Federal Government departments. You will guide engagements, mentor consultants, and produce executive-grade documentation.

The role requires 8+ years IT and 5+ years in information security/GRC, with deep knowledge of PSPF/ISM/ISO/NIST. CISSP/CISA/CISM or IRAP assessor certifications are preferred, VR1 clearance desirable.

Qualifications

• Bachelor’s or Master’s degree (or equivalent experience).
• Deep knowledge of PSPF, ISM, Essential 8, DSPF, ISO 27000, NIST CSF/800 series, and CIS.
• IRAP Assessor experience or actively pursuing.
• Proven track record leading GRC engagements and delivering strategic security outcomes.
• Strong policy writing skills aligned to ISM and PSPF; hands-on Essential 8 implementation and maturity assessment.
• Experience engaging senior government stakeholders and executive audiences.

Responsibilities

• Lead governance, risk, compliance, and assurance engagements across Federal Government departments.
• Mentor junior consultants and engage with a senior stakeholder audience.
• Produce technical documentation and board-level briefings and reports.
• Drive security assurance and accreditation programs end-to-end.

Skills

Cybersecurity risk

GRC

Policy writing

Stakeholder engagement

Mentoring

Executive communication

Security operations

IRAP assessor

Information security

Education

Bachelor’s or Master’s degree

Tools

CISSP/CISA/CISM/IRAP certifications

Job description

DXC Technology is seeking a senior cybersecurity advisor to lead governance, risk, compliance, and assurance services across Federal Government departments. You will guide engagements, mentor consultants, and produce executive-grade documentation.

The role requires 8+ years IT and 5+ years in information security/GRC, with deep knowledge of PSPF/ISM/ISO/NIST. CISSP/CISA/CISM or IRAP assessor certifications are preferred, VR1 clearance desirable.