Strategic IT Security Consultant – Risk & Compliance

Minter Ellison; Australia; On-site; AUD 120,000 - 170,000; Full time

Job summary

MinterEllison is seeking an IT Security Consultant to deliver technical security risk analysis and assurance across its technology environment.

The role spans risk assessments, security architecture reviews, and assurance coordination, including audits, client questionnaires, and supplier assessments. You will collaborate with IT Architecture, IT Operations and external providers to strengthen security across the firm.

Qualifications

• 2+ years in information security or IT risk with hands-on assessments.
• Structured threat and risk assessments using recognised methodologies (STRIDE, OCTAVE, NIST RMF).
• Security architectures review experience including cloud and hybrid infra.
• Familiarity with vulnerability management tooling (Qualys, Tenable, CrowdStrike).
• Knowledge of ISO27001, SSAE16, APRA CPS234, ASD Essential 8, NIST v2.0.

Responsibilities

• Conduct threat and risk assessments for systems, apps and AI solutions with actionable remediation reports.
• Perform security architecture reviews against MinterEllison standards and frameworks.
• Provide security input into IT projects, embedding security by design.
• Analyse vulnerability results, triage by risk, track remediation to closure.
• Coordinate penetration testing activities and third-party scoping and remediation tracking.
• Respond to client questionnaires, audits, and RFPs.
• Maintain security governance, including ISO27001 compliance and risk registers.
• Support security awareness and training programs.

Skills

Threat and risk assessments

Security architecture reviews

Vulnerability management

Security frameworks knowledge

Executive reporting

IT audits

Agile mindset

Communication across levels

Education

CISSP

CISM

CISA

CompTIA Security+

Tools

Qualys

Tenable

CrowdStrike

Azure/M365

Job description

MinterEllison is seeking an IT Security Consultant to deliver technical security risk analysis and assurance across its technology environment.

The role spans risk assessments, security architecture reviews, and assurance coordination, including audits, client questionnaires, and supplier assessments. You will collaborate with IT Architecture, IT Operations and external providers to strengthen security across the firm.