Principal Security Consultant (GRC)

About the role

Infotrust is expanding its Governance, Risk & Compliance practice in Sydney and seeks a senior consultant to lead complex security engagements. You will work closely with the Head of GRC, own client projects and shape executive conversations around cyber risk.

Key responsibilities

• Design and facilitate executive incident‑response tabletop exercises to test leadership decision‑making under pressure.
• Develop and deliver GRC strategies, roadmaps and practical programmes aligned with business priorities.
• Lead and scope complex cyber‑security and GRC engagements, advising C‑suite and senior stakeholders on risk, governance and resilience.

Required profile

• Extensive cyber‑security consulting experience, with a proven ability to translate technical concepts into business context.
• Demonstrated track record of facilitating incident‑response tabletop exercises for executive teams.
• Strong knowledge of security frameworks such as ISO 27001, the Australian ISM and the Essential Eight.

Required skills

• ISO 27001
• Australian Information Security Manual (ISM)
• Essential Eight
• CISSP (or CISM) certification
• IRAP assessment experience

What we offer

• Hybrid working model
• Professional development opportunities
• Paid parental leave