At a Glance
- Tasks: Assess and enhance clients' governance, risk, and compliance frameworks in cybersecurity.
- Company: Morrisec, a leader in tailored security strategies and services.
- Benefits: Full-time role with a vibrant company culture and team-building activities.
- Other info: Join a team that celebrates Halloween and enjoys outings at Luna Park!
- Why this job: Make a real impact on clients' security while enjoying a fun work environment.
- Qualifications: Strong knowledge of ISMS frameworks and experience in Cybersecurity and GRC activities.
The predicted salary is between 75600 - 92400 $ per year.
Company Description
Morrisec specializes in designing tailored security strategies and services that align with each organization’s unique threat landscape, risk profile, and strategic objectives.
The company leverages extensive experience and a risk-based methodology to help clients address critical cybersecurity risks and meet complex compliance obligations.
By integrating security with business priorities, Morrisec supports sustainable growth and resilience.
Team members collaborate closely with clients to deliver practical, outcomes-focused security solutions.
Role Description
The Information Security GRC Consultant is a full time position based in Sydney, NSW.
The consultant will assess and enhance clients’ governance, risk, and compliance frameworks, including policies, controls, and processes across information security and data protection.
Day-to-day activities include performing risk assessments, aligning clients to relevant standards and regulations, and preparing recommendations and roadmaps for improvement.
The role involves drafting and reviewing security policies, supporting implementation of information security management systems, and advising on compliance with data privacy and cybersecurity requirements.
The consultant will work closely with client stakeholders to communicate findings, deliver reports, and support audits and continuous improvement initiatives.
Qualifications
- Strong knowledge of Information Security Management System (ISMS) frameworks and broader Information Security Management practices.
- Experience in Cybersecurity and Network Security, including understanding of common threats, vulnerabilities, and control measures.
- Competence in Data Privacy requirements and regulations, with the ability to translate legal and regulatory obligations into practical controls.
- Experience in Governance, Risk, and Compliance (GRC) activities, such as risk assessment, control design, policy development, and audit support.
- Familiarity with relevant standards and regulations (e. g., ISO 27001, NIST frameworks, privacy legislation) and their practical application.
- Strong analytical, documentation, and report-writing skills, with attention to detail and accuracy.
- Effective communication and stakeholder engagement skills, with the ability to present technical concepts in clear, accessible language.
- Willingness to get involved in a company culture that dresses up for Halloween, goes on rides at Luna Park, and team building exercises such as pottery.
- #J-18808-Ljbffr
Information Security GRC Consultant in Sydney employer: Morrisec
Morrisec offers a collaborative work environment where team members closely engage with clients to deliver practical security solutions. The company emphasizes professional growth through hands-on experience in governance, risk, and compliance frameworks, making it an attractive place for those looking to advance their careers in cybersecurity. With a focus on aligning security strategies with business priorities, employees can contribute to meaningful outcomes that support sustainable growth.
