Cybersecurity GRC Consultant

Overview

Be among the first 25 applicants. This range is provided by Triskele Labs. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Base pay range

A$100,000.00/yr - A$115,000.00/yr

Triskele Labs are one of the leading providers of cybersecurity services in Australia. We assist clients to reduce their risk of a cyber compromise through the delivery of risk-considered controls.

Triskele Labs are one of the last remaining boutiques in Australia. We are currently the largest CREST Registered Penetration Testing company in Melbourne and one of the only boutiques to run a 24x7x365 Security Operations Team completely onshore.

Are you looking to work in cybersecurity consulting where real impact matters more than ticking boxes? Triskele Labs is seeking a Cybersecurity GRC Consultant to join our growing Advisory team in Melbourne.

In this hybrid client-facing role, you\'ll work across industries to deliver clear, practical security assessments that help organisations meaningfully reduce risk. You\'ll support implementation and uplift efforts aligned to frameworks like ISO 27001, NIST CSF, and the Essential Eight, working closely with both technical and non-technical stakeholders to drive change where it matters most.

We\'re looking for someone who brings both security expertise and a questioning mindset — someone who is comfortable challenging assumptions, validating controls, and helping our clients cut through complexity. You\'ll also have the opportunity to collaborate with other internal teams across offensive security, DFIR, and detection and response.

If you want to grow your GRC career in a role where the work is valued, varied, and grounded in the real world, this could be the perfect fit.

Responsibilities

• Conduct cybersecurity risk assessments aligned to ISO 27001, NIST CSF, Essential Eight and related frameworks
• Perform gap assessments and control maturity reviews for regulatory, compliance, and best-practice purposes
• Support the development and implementation of Information Security Management Systems (ISMS)
• Create board and executive-level reporting to communicate cyber risks and prioritise remediation
• Facilitate workshops and lead conversations with stakeholders across technical and business functions
• Work closely with internal experts in SOC, red teaming, and DFIR to ground recommendations in operational realities
• Build lasting relationships with clients and support them throughout their cyber maturity journey

Experience & Skills

• 2-4 years of experience in cybersecurity GRC, ideally across multiple sectors or clients
• Practical knowledge of ISO 27001, NIST CSF, and Essential Eight
• Experience conducting risk assessments and drafting core security documentation (e.g., risk registers, policies, reports)
• Strong communication and engagement skills with business and technical audiences
• A proactive, consultative approach to understanding and validating control environments
• Technical awareness of security operations and engineering concepts
• Willingness to learn, take initiative, and own deliverables in a collaborative team setting

Certifications

• Required: ISO 27001 Lead Implementor or Auditor
• One or more of the following: CISSP, CISM, CISA (or working towards)
  • Preferred: SABSA or CRISC
  • ITIL Foundations
  • Additional governance or cloud-related security certifications
  What We Look For
  • Excellent written and verbal communication
  • Strong attention to detail and structured thinking
  • Ability to balance autonomy with teamwork in a fast-paced environment
  • A genuine interest in helping organisations improve their security maturity
  • Client-first mindset with professional integrity
  KPIs
  • Timely, high-quality delivery of client engagements
  • Positive stakeholder feedback and repeat client engagements
  • Development and contribution to internal documentation and toolkits
  • 75-80% billable utilisation
  • Active engagement in professional development
  Reporting Line

Reports to: Senior GRC Consultant

Works with: Advisory team, technical practices, and clients

Benefits

Team culture is everything to Triskele Labs and it is the reason we exist. We are a forward-thinking company and always looking for ways to boost our team culture to ensure we are a destination employer. We continually undertake surveys to seek feedback from our team on ways we can improve our work environment and team member experience at Triskele Labs.

We provide our team a great range of additional benefits such as:

• Hybrid Flexibility: Work two days per week from our Melbourne CBD office, and remotely the rest of the week (subject to client needs)
• Varied Client Engagements: Collaborate with organisations of all sizes, across industries and maturity levels
• Career Development: Access ongoing mentorship, structured training pathways, and certification support
• Real-World Cybersecurity Exposure: Collaborate with our internal red team, SOC, and incident response units to deepen your practical understanding
• People & Culture: Participate in team events, offsites, and connection initiatives run by our dedicated People & Culture team

If you\'ve made it this far, there\'s a good chance you\'re who we\'re looking for

At Triskele Labs, we value initiative and attention to detail—so please include a cover letter addressed to Rob Barry, Chief Operating Officer, with your application. Applications without a cover letter will not be progressed.

Working Arrangements

The role is full time, Monday to Friday in our Collins St Melbourne office, with hybrid working arrangements: two days in-office, three days remote (client needs may vary). Occasional interstate travel may be required.

Seniority level

• Mid-Senior level

Employment type

• Full-time

Job function

• Other
• Industries IT Services and IT Consulting

Referrals increase your chances of interviewing at Triskele Labs by 2x

Get notified about new Cyber Security Consultant jobs in Melbourne, Victoria, Australia.

Melbourne, Victoria, Australia A$120,000.00-A$180,000.00 1 week ago

Melbourne, Victoria, Australia A$130,000.00-A$135,000.00 2 days ago

Domain Consultant - Security Operations Transformation

Melbourne, Victoria, Australia 49 minutes ago

Cyber Security and Business Operations Analyst

Campbellfield, Victoria, Australia 3 weeks ago

Melbourne, Victoria, Australia A$90,000.00-A$120,000.00 3 weeks ago

Melbourne, Victoria, Australia 2 days ago

Melbourne, Victoria, Australia 2 weeks ago

Melbourne, Victoria, Australia 3 days ago

Melbourne, Victoria, Australia 3 days ago

Security Consultant, Security Testing & Assurance

Melbourne, Victoria, Australia 2 weeks ago

Cyber Security Engineering & Advisory Manager

Melbourne, Victoria, Australia A$160,000.00-A$190,000.00 2 weeks ago

Box Hill South, Victoria, Australia A$180,000.00-A$190,000.00 4 days ago

Privileged Access Security (PAM) Consultant

Melbourne, Victoria, Australia 1 week ago

Expression of interest - Referrals - Security

Melbourne, Victoria, Australia 4 months ago

Melbourne, Victoria, Australia 1 month ago

Technical Consultant - Data Security (Microsoft Purview)

Melbourne, Victoria, Australia 4 weeks ago

Melbourne, Victoria, Australia 2 months ago

Melbourne, Victoria, Australia A$168,109.00-A$189,184.00 4 days ago

Melbourne, Victoria, Australia 2 weeks ago

Melbourne, Victoria, Australia A$800.00-A$930.00 4 days ago

Consultant or Senior Consultant- Financial Services - Offensive Security - Advanced Security Centre

Melbourne, Victoria, Australia 4 days ago

Manager, Cyber Security Architecture Practice

Melbourne, Victoria, Australia 3 days ago

Senior Consultant SpiderLabs - Penetration Tester (Sydney, Melbourne, Canberra)

Melbourne, Victoria, Australia 3 months ago

Melbourne, Victoria, Australia 3 weeks ago

Melbourne, Victoria, Australia 1 week ago

Senior Associate | Data Governance & Privacy

Melbourne, Victoria, Australia 2 weeks ago

Melbourne, Victoria, Australia 1 week ago

Melbourne, Victoria, Australia 1 week ago

Lecturer & Senior Lecturer/Assistant Professors -CIS- Cybersecurity, Data Science, Networking & Software Engineering

Melbourne, Victoria, Australia 3 weeks ago

Senior Lecturer/Associate Professor – Cyber Security (Management & Humanities)

Melbourne, Victoria, Australia 1 week ago

Melbourne, Victoria, Australia 1 week ago

Melbourne, Victoria, Australia 2 days ago

Cyber Security Analyst - 6 Month Contract

Melbourne, Victoria, Australia 2 days ago

We're unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.

#J-18808-Ljbffr

---