Location: Various locations across Australia (Remote and Onsite opportunities available)
Type: Contract, Permanent, or Subcontractor
Summary
SovereignSourced invites talented GRC Consultants to join our employment register. This register offers access to a diverse range of opportunities across industries such as finance, technology, government, and professional services. While registering your interest doesn’t guarantee immediate placement, it ensures you’re considered for roles aligned with your expertise as they arise.
About the Role
We are seeking an experienced Governance, Risk and Compliance (GRC) Specialist to support and enhance an organisation’s cyber security governance framework, risk management processes, and compliance with Australian regulations. This role requires a strong understanding of risk management methodologies, regulatory compliance, and cyber security best practices to help drive business resilience and security maturity.
Salary Range
Salaries for GRC Consultant roles range from $120k to $180k including super.
Key Responsibilities
Develop, implement, and maintain GRC frameworks, policies, and procedures in alignment with Australian Government regulations and industry standards such as ISM, PSPF, ASD Essential Eight, ISO 27001, NIST, and other relevant security frameworks.
Conduct risk assessments, gap analyses, and security audits to identify potential vulnerabilities and ensure ongoing compliance.
Collaborate with internal and external stakeholders to manage risk mitigation strategies and security governance activities.
Develop and maintain risk registers, incident management plans, and compliance dashboards.
Support security incident response processes and develop strategies for mitigating regulatory and compliance risks.
Prepare and deliver reports on risk, compliance, and security governance to senior management and external auditors.
Facilitate cyber security awareness training and compliance workshops to strengthen organisational security culture.
Work closely with security architects, operations teams, and legal teams to ensure compliance objectives are met.
Skills and Experience
Security Clearance: Positive Vetting required
Bachelor’s degree in Cybersecurity, Information Technology, Business, or a related field.
Minimum 3-6 years’ experience in governance, risk, and compliance roles, preferably in Government or Defence sectors.
Strong knowledge of Australian cyber security regulations, compliance standards, and governance frameworks.
Experience conducting risk assessments, internal audits, and regulatory compliance reviews.
Familiarity with ISO 27001, NIST, PSPF, ISM, ASD and Essential Eight frameworks
Ability to communicate effectively with senior stakeholders, security teams, and regulators.
Proficiency in using GRC tools and risk management platforms.
Relevant certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Auditor/Implementer are highly regarded.
Benefits of Joining
Access to exclusive opportunities with leading organisations in Australia’s most dynamic industries.
Competitive compensation packages tailored to your expertise and engagement type.
Flexible work arrangements to suit your career and lifestyle preferences.
Opportunities to work on high-impact projects that enhance your professional portfolio.
Collaboration with industry leaders and opportunities for ongoing professional development.
Important Note
Joining our employment register means your application will be retained and considered for future opportunities that match your skills and experience. Registering does not guarantee immediate placement but ensures you’re among the first to be considered for relevant roles as they arise.
