Senior Consultant - GRC

_{07th August, 2026}

About CyberCX

CyberCX is the leading independent cyber security services organisation in Australia and New Zealand. We bring together the region’s most trusted cyber security companies to deliver end-to-end services to enterprise and government.

With 1400+ cyber security professionals across Australia, New Zealand, the UK and the US, we offer unmatched capability, deep expertise, and the opportunity to do meaningful work that helps secure our communities.

About the Role

Our Governance, Risk & Compliance (GRC) practice is growing rapidly, and we’re looking for experienced, customer-obsessed professionals who want to deliver meaningful cyber security outcomes.

As a Senior Consultant, you’ll lead complex engagements, guide clients through security uplift, and contribute to the development of Australia’s most capable cyber consulting team.

What You’ll Do

• Lead information security engagements such as ISMS implementations and audits, cyber risk assessments, posture reviews, incident response readiness assessments, and the development of cyber security frameworks.
• Conduct and support security audits, including PCI DSS assessments and readiness activities.
• Prepare clear, tailored, high-quality reports and recommendations for both executive and technical audiences.
• Partner with clients to identify security opportunities, design improvements, and drive cyber uplift initiatives.
• Mentor consultants, contribute to team capability growth, and support the overall maturity of the GRC practice.

What You’ll Bring

• 3+ years’ experience in cyber security, ideally with exposure across both commercial and government sectors.
• Strong audit background, with hands-on experience conducting or supporting security audits (internal, external, or compliance-focused).
• Experience with PCI DSS, including assessments, readiness activities, evidence collection, or remediation support.
• Solid working knowledge of key frameworks such as ISO 27001, NIST CSF, CIS Controls and the Essential Eight.
• High proficiency across GRC concepts and the ability to independently deliver complex consulting engagements.
• Excellent communication, stakeholder engagement and a solutions-focused mindset.

Due to the nature of the work, NV1 clearance is required.

Why CyberCX

• Flexible hybrid working – balance your time between home and office.
• Retail & lifestyle discounts through our corporate partners.
• Unmatched career development within Australia and New Zealand’s largest cyber community.
• Impactful consulting work across diverse industries, helping clients strengthen their security posture in a rapidly evolving cyber landscape.

We kindly request no agency submissions for this role.  Unsolicited CV’s will not be accepted, and no fees will be payable.