GRC Security Consultant

GRC Security Consultant

Melbourne | Hybrid

Infotrust is looking for a GRC Security Consultant to join our Melbourne team, following strong demand from financial services clients. The role will initially support an established financial services engagement, working alongside experienced consultants to help a regulated organisation strengthen its security, governance and risk practices.

As part of our national GRC practice, the position also offers opportunities across a broader range of clients, projects and industries over time.

The Role

Working with stakeholders across security, technology, risk and audit, the consultant will identify areas for improvement and help translate findings into practical action. Responsibilities include:

• Conducting security reviews, risk assessments and maturity assessments
• Reviewing and strengthening governance frameworks and risk management practices
• Supporting assurance, compliance and remediation programs
• Providing clear, practical advice aligned with recognised security and governance frameworks

Experience

Relevant backgrounds include security consulting, governance, risk, compliance and internal audit. Practical experience and an understanding of client environments matter more than a prescribed certification pathway.

• Delivering GRC or cyber security engagements
• Working within financial services or other regulated environments, ideally with APRA-regulated organisations
• Applying governance, risk assessment, assurance and audit processes
• Working with frameworks such as ISO 27001, NIST Cyber Security Framework, Essential Eight or the Information Security Manual (ISM)
• Communicating findings clearly and building relationships with client stakeholders

Experience with APRA prudential standards, Three Lines of Defence models, or tripartite audit environments would be highly regarded.

Why Infotrust

Our national GRC practice works closely with colleagues across Offensive Security, Defensive Security, DFIR, and our 24/7 Security Operations Centre - bringing a range of technical perspectives to client engagements.

The role offers hybrid working, professional development and the opportunity to build consulting experience alongside an experienced team.

Apply now or contact Kristen Brinker for a confidential conversation.