Security Consultant – GRC Specialist

About the role

Thales is looking for a Security Consultant to lead complex Governance, Risk and Compliance (GRC) activities across large government and commercial projects. You will help improve client security capabilities, deliver high‑quality outcomes and build strong stakeholder relationships.

Key responsibilities

• Leverage Thales’ broad capabilities to deliver multi‑service security solutions.
• Conduct vulnerability and risk assessments and support remediation efforts.
• Contribute to security documentation, policies and procedures.
• Collaborate with IT, risk and business stakeholders.
• Apply security frameworks such as ASD Essential Eight, ISM, ISO 27001/27002, NIST and the Australian Government Protective Security Policy Framework.
• Stay informed on emerging security risks, controls, regulations and industry trends.
• Develop and deliver training materials for public and private audiences.
• Enhance company methodologies to provide effective security and risk advice.

Required profile

• 4‑5 years of experience in security consulting, GRC or related fields.
• Proven ability to work on large, complex projects and deliver results.
• Strong stakeholder management and communication skills.
• Continuous learning mindset to keep up with evolving security threats and standards.

Required skills

• ASD Essential Eight
• ISM (Information Security Manual)
• ISO 27001 and ISO 27002
• NIST framework
• Australian Government Protective Security Policy Framework
• Vulnerability assessment
• Risk assessment

What we offer

• Competitive remuneration structure.
• Hybrid and flexible working options under the Thales Flex program.
• Paid parental leave and family support.
• Day off on your birthday each year.
• Novated lease options.
• Ongoing personal and professional development opportunities.
• Support through Sonder – Welling and Support partner.