Cyber Security Consultant - GRC

About the client:

Our client is a collective of companies, including a licensed telecommunications carrier providing network and data center services across Australia and Internationally, and a Managed Service Provider (MSP) and Manage Security Service Provider (MSSP) specializing in IT solutions for mid-market corporate clients and government entities.

Their vision is to empower all organizations, regardless of size, with access to fit-for-purpose, secure IT and telecommunications solutions that support the achievement of their own strategic objectives.

Job Summary:

The Cyber Security Consultant supports the delivery of cyber security and risk engagements, performing assessments, documentation, and analysis activities under the guidance of senior team members. This role is ideal for consultants developing their expertise across cyber, risk, and compliance disciplines.

Responsibilities:

• Delivery Support.
• Assist in cyber security risk assessments, audits, and uplift activities.
• Support documentation development, including policies, procedures, and risk registers.
• Contribute to client reports and presentations.
• Analysis and Continuous Improvement.
• Conduct control assessments and evidence reviews.
• Track remediation actions and support implementation activities.
• Maintain awareness of emerging cyber threats and regulatory changes.
• Stakeholder Collaboration.
• Work closely with internal team members and client stakeholders.
• Participate in workshops and client meetings.

Essential:

• 2-4 years' experience in cyber security, IT risk, or related roles.
• NV1 (Negative Vetting 1) Clearance is required.
• Foundational knowledge of ISO 27001, Essential Eight, or NIST frameworks.
• Strong analytical and documentation skills.

Desirable:

• Security+, ISO 27001 Foundation, or similar certifications.
• Experience working in consulting or government environments.

Work Health & Safety Responsibilities:

• Obtain a police check prior to employment
• Abide by all company policies and procedures
• Report any injuries, hazards or incidents to yourself or others
• Maintain a safe workplace for yourself and colleagues

Information Security:

Our client operates under an ISO 27001 compliant Information Security Management System. As such, you will be responsible for adhering to all applicable policies, processes and procedures. You are also responsible for reporting any potential security incidents or security improvements to the Information Security Officer.