Senior GRC & Cyber Advisory Leader

Dxc Technology; Canberra; On-site; AUD 150,000 - 190,000; Full time

Job summary

DXC Technology, Canberra-based, seeks a Senior GRC and Advisory Consultant to lead governance, risk, compliance and assurance for Federal Government departments. The role requires deep GRC expertise, policy writing, and the ability to mentor senior consultants while engaging CISO-level stakeholders.

The ideal candidate has 8+ years IT experience with Information Security, GRC, Risk or Audit, and holds active CISSP/CISA/CISM or IRAP credentials, with NV1 desirable.

Qualifications

• 8+ years IT experience, including 5+ years in Information Security, GRC, Risk or Audit
• Bachelor’s or Master’s degree (or equivalent experience)
• Deep knowledge of PSPF, ISM, Essential 8, DSPF, ISO 27000, NIST CSF/800 series, and CIS
• Proven track record leading GRC engagements and delivering strategic security outcomes
• Strong policy writing skills aligned to ISM and PSPF; hands‑on Essential 8 implementation and maturity assessment
• IRAP Assessor experience (or actively pursuing)
• Ability to engage senior government stakeholders and executive audiences (CISO‑level and above)
• Experience mentoring and leading security consultants
• Solid understanding of network, application, web, and OS security (Windows, Linux)
• Skilled in producing technical documentation and board‑level briefings
• NV1 Security Clearance highly desirable
• Current CISSP, CISA, CISM, or IRAP Assessor certification
• Experience with ACSC reporting and government incident response frameworks
• Ability to drive security assurance and accreditation programs end‑to‑end
• Experience contributing to RFP/tender responses for cybersecurity services
• Exposure to cloud security governance (AWS, Azure, GovCloud)
• Strong capability in detecting, deterring and responding to cyber threats
• Technical writing capability for executive and board‑level audiences

Responsibilities

• Lead governance, risk, compliance, and assurance services across Federal Government departments
• Engage and mentor junior consultants on GRC engagements
• Deliver security programs end‑to‑end and drive accreditation
• Write policy aligned with ISM and PSPF and assess Essential 8 maturity
• Interact with CISO‑level and executive stakeholders and produce board‑level briefings

Skills

Governance

Risk management

Compliance

Cybersecurity

Policy writing

Executive engagement

Mentoring

Security governance

Technical writing

Education

Bachelor's degree

Master's degree

Job description

DXC Technology, Canberra-based, seeks a Senior GRC and Advisory Consultant to lead governance, risk, compliance and assurance for Federal Government departments. The role requires deep GRC expertise, policy writing, and the ability to mentor senior consultants while engaging CISO-level stakeholders.

The ideal candidate has 8+ years IT experience with Information Security, GRC, Risk or Audit, and holds active CISSP/CISA/CISM or IRAP credentials, with NV1 desirable.