GRC and Advisory Consultant – Cybersecurity

About the role

DXC Technology's Cybersecurity team is looking for a GRC and Advisory Consultant to deliver advisory and consulting services across Federal Government departments. The role requires deep expertise in cybersecurity risk, governance, policy and compliance within a government context.

Required profile

• 5+ years of IT experience, including 2-4 years in Information Security, Risk, Audit or similar
• Bachelor's or Master's degree (or equivalent demonstrated experience)
• NV1 Security Clearance (mandatory)
• Desirable: experience supporting or mentoring a small team of security consultants; IRAP Assessor (not essential); working toward CISSP, CISA, CISM, IRAP or GSEC

Required skills

• Strong knowledge of PSPF, ISM, Essential 8, DSPF, ISO 27000, NIST CSF/800 series and CIS
• Writing security policies and procedures aligned to ISM and PSPF
• Implementing Essential 8 controls and IRAP pre-assessment and certification/accreditation
• Internet, application, web and network security, and OS security (Windows, Linux)
• Risk management frameworks and high-quality technical documentation
• Communication with technical and non-technical stakeholders

Applicants apply through the Apply Now button on the DXC site. DXC describes its work model as prioritising in-person collaboration with flexibility for wellbeing and productivity.