GRC Security Consultant

About the role

Infotrust is seeking a GRC Security Consultant to join its Melbourne team. The role will initially support a financial services engagement, helping a regulated organisation improve its security, governance and risk practices.

Key responsibilities

• Conduct security, risk and maturity assessments for clients.
• Review and strengthen governance frameworks and risk‑management processes.
• Support assurance, compliance and remediation programmes.
• Translate findings into practical, actionable recommendations.

Required profile

• Experience in security consulting, governance, risk, compliance or internal audit.
• Background working in financial services or other regulated environments, preferably APRA‑regulated organisations.
• Ability to communicate findings clearly and build relationships with client stakeholders.

Required skills

• Knowledge of ISO 27001, NIST Cyber Security Framework, Essential Eight and the Australian Information Security Manual (ISM).
• Experience with APRA prudential standards, Three Lines of Defence models or tripartite audit environments.

What we offer

• Hybrid working arrangement.
• Professional development and opportunity to work alongside experienced consultants.
• Access to Infotrust’s national GRC practice and collaboration with Offensive Security, Defensive Security, DFIR and 24/7 SOC teams.