GRC Principal

_{31st August, 2026}

About the Role

The Principal will use their deep experience of Cyber security, Risk Management, ICT, consulting and commercial skills to work with clients to address their Governance, Risk and Compliance challenges. The Principal will lead security teams to solve problems for our clients and adopt leading edge security concepts and approaches. The Principal will have the opportunity to participate in the shaping of CyberCX future services as we expand across geographies.

What You'll Do

• Meet with clients to understand their problems and develop fit for purpose solutions bringing the full range of capability of CyberCX.
• Conduct assessments that address client requirements using information security frameworks and standards such as ISM, PSPF, ISO 62443, NIST, PCI-DSS.
• Collaborate and mentor more junior members.
• Provide quality assurance.
• Prepare and present high-quality reports and executive presentations.

What You'll Bring

• IT Defence experience highly desirable
• At least one major certification such as PCI-DSS QSA, ISO 62443 or iRAP assessor
• Excellent written and verbal communication skills
• A high performing and self motivated consultant with a deep understanding of Cyber Security and Risk Management that allows them to lead complex projects and coach junior members
• Client focus - deliver great client experience while meeting commercial commitments.
• Deep knowledge across a range of Security and ICT frameworks

Why CyberCX

• Flexible hybrid working – balance your time between home and office.
• Retail & lifestyle discounts through our corporate partners.
• Unmatched career development within Australia and New Zealand’s largest cyber community.
• Impactful consulting work across diverse industries, helping clients strengthen their security posture in a rapidly evolving cyber landscape.

Please note, due to the nature of this role, it is a mandatory requirement that all applicants are Australian citizens with the ability to hold an Australian Security Clearance. Only Brisbane-based applicants will be considered for this role.

We kindly request no agency submissions for this role.  Unsolicited CV’s will not be accepted, and no fees will be payable.