Cybersecurity Consultant - GRC

We are looking for an experienced Cybersecurity – GRC Consultant to join a high-performing security team and play a key role in strengthening application security governance, risk, and compliance across enterprise environments.

Key Responsibilities

• Lead application security risk assessments and threat modelling activities

• Conduct secure design reviews and security control assessments

• Support compliance initiatives across ISO 27001, ASD Essential Eight, ISM, SOC 2, PCI DSS, and related frameworks

• Develop and maintain security policies, standards, and risk treatment plans

• Partner with development, engineering, and architecture teams to embed secure-by-design practices

• Support application security testing programs including SAST, DAST, penetration testing, and secure code reviews

• Produce high-quality security assessments, risk reports, and accreditation artefacts

• Mentor junior consultants and contribute to continuous improvement initiatives

Required Skills

• Strong experience in Cybersecurity GRC and Application Security
• Expertise in threat modelling and application security risk assessments
• Knowledge of ASD ISM, Essential Eight, ISO 27001, and similar frameworks
• Experience supporting audits, accreditation, and assurance activities
• Excellent stakeholder engagement and communication skills
• Ability to operate independently at a senior consultant level

Desirable

• CISSP, CISM, CRISC, CCSK, GWAPT, GWEB, or similar certifications

• Cloud security experience (AWS, Azure, or GCP)

• Exposure to DevSecOps practices and tools

• Experience within Government or Critical Infrastructure environments

Mandatory Requirements

• Australian Citizenship

• Active AGSVA NV1 Clearance

We specialize in Digital, ERP, and larger IT Services. We offer flexible, efficient and collaborative solutions to any organization that requires IT, experts. Our agile, agnostic, and flexible solutions will help you source the IT Expertise you need. If you are looking for new opportunities, send your profile at ***email_hidden***.

Also follow our LinkedIn page for new job opportunities and more.

Zone IT Solutions is an equal opportunity employer and our recruitment process focuses on essential skills and abilities. We encourage applications from a diverse array of backgrounds, including individuals of various ethnicities, cultures, and linguistic backgrounds, as well as those with disabilities.