Senior GRC & Security Assurance Consultant

Triskele Labs; Melbourne; Hybrid; AUD 150,000 - 190,000; Full time

Benefits offered by this job

Hybrid work

Competitive salary

Training & certification

Benefits program

Job summary

Triskele Labs in Australia is seeking a Senior GRC Consultant to deliver security assurance across cloud, hybrid and emerging tech environments, including AI. You will translate findings into practical business guidance for technical, executive and board audiences.

The role emphasizes governance, risk and compliance across frameworks such as ISO 27001, NIST and CPS 230/234, with opportunities to mentor teams and help shape client strategy.

Qualifications

• Senior security professional with GRC advisory experience across cloud, hybrid and on‑prem environments.
• Experience assessing security controls design and operating effectiveness.
• Proven ability to translate findings into business risks and recommendations.
• Experience with CPS 230/234, ISO27001, ASD ISM, NIST CSF frameworks.
• Proven client engagement and stakeholder management in regulated sectors.

Responsibilities

• Conduct security assurance across cloud, hybrid and AI environments.
• Assess design and effectiveness of identity, infrastructure and monitoring controls.
• Analyse configurations and telemetry to identify material risks.
• Lead cybersecurity maturity, risk and compliance assessments per frameworks.
• Advise stakeholders on regulatory obligations and best practices.
• Plan risk workshops and provide practical improvement recommendations.
• Design and monitor policies and internal controls for compliance.
• Contribute to GRC methodologies, service offerings and mentoring.

Skills

GRC advisory

Security controls

Cloud security

Risk assessments

Communication

Education

Bachelor's degree

Tools

Azure

AWS

GCP

Job description

Triskele Labs in Australia is seeking a Senior GRC Consultant to deliver security assurance across cloud, hybrid and emerging tech environments, including AI. You will translate findings into practical business guidance for technical, executive and board audiences.

The role emphasizes governance, risk and compliance across frameworks such as ISO 27001, NIST and CPS 230/234, with opportunities to mentor teams and help shape client strategy.