Senior GRC Consultant — Cybersecurity

About the role

We are a well‑established Australian cybersecurity consultancy seeking a Senior GRC Consultant to lead small‑to‑medium client engagements. This is a hands‑on, client‑facing position where you will own the delivery, mentor junior staff, and act as the primary business representative.

Key responsibilities

• Lead IRAP preparations, gap assessments and maturity assessments for federal government clients.
• Design and uplift security policies and frameworks.
• Conduct architecture reviews and provide recommendations.
• Manage client relationships and handle difficult conversations when required.
• Mentor and lead junior consultants on engagements.
• Contribute to the firm’s capability growth as the business scales.

Required profile

• Solid background in Governance, Risk & Compliance (GRC) within professional services, consultancy or financial services.
• Hands‑on experience with IRAP, Essential 8, ISO 27001 or similar frameworks.
• Strong written and verbal communication, comfortable presenting to senior stakeholders.
• Ability to lead engagements independently without hand‑holding.
• Australian citizenship with at least baseline security clearance; NV1 preferred.

Required skills

• IRAP
• Essential 8
• ISO 27001
• GRC frameworks

What we offer

• Genuine work‑life balance with flexible remote work.
• Employee events, annual check‑ins and a 5+5 leave program.
• Budget for courses, industry talks and professional development.
• Long‑term career development support.