At a Glance
- Tasks: Lead cyber risk strategy and manage vulnerability frameworks for enterprise applications.
- Company: Join XPT Software, a dynamic tech company with a global presence.
- Benefits: Competitive contract salary, flexible work arrangements, and opportunities for professional growth.
- Other info: Collaborative environment with strong focus on innovation and career advancement.
- Why this job: Make a real impact in cybersecurity while working with top clients across various industries.
- Qualifications: Experience in GRC, cyber risk, and vulnerability management required.
The predicted salary is between 121500 - 148500 $ per year.
XPT Software Australia Pty Ltd is a Software Services company incorporated in 2016. We work with top clients across Australia in Banking, Insurance, Telecom, Retail, Energy, Mining, and Manufacturing domains. We have 120+ technocrats in Australia working at our client locations. XPT Software Australia is part of group companies which has a global presence across India & Europe.
Role Summary
We are seeking an experienced GRC Consultant – Cyber Lead to drive governance and maturity of non-OS vulnerability management across enterprise application and platform environments. This role focuses on cyber risk oversight, exception management, and vulnerability treatment strategy, ensuring risks are effectively assessed, governed, and aligned with enterprise security standards—while remediation execution remains with delivery teams.
Key Responsibilities
- Governance & Risk Oversight
- Define and implement non-OS vulnerability management frameworks, policies, and standards
- Establish governance forums, escalation paths, and decision-making processes
- Ensure compliance with regulatory, audit, and enterprise security requirements
- Exception & Treatment Management
- Manage remediation exceptions and risk acceptance lifecycle
- Validate compensating controls and residual risks
- Drive risk-based treatment plans with application and platform teams
- Perform risk assessments for vulnerabilities that cannot be remediated
- Enable risk-based decision-making aligned to business risk appetite
- Ensure proper documentation, tracking, and periodic review of accepted risks
- Tooling & Capability Uplift
- Lead tooling strategy, evaluation, and automation initiatives
- Improve vulnerability management maturity and processes
- Support training and adoption across delivery teams
- Security Improvement & SDLC Integration
- Oversee remediation outcomes from pen tests, audits, and assessments
- Promote secure-by-design and DevSecOps practices
- Ensure vulnerabilities are identified and treated before production release
- Stakeholder Management
- Collaborate with Cyber, Application, Infrastructure, and Operations teams
- Provide risk insights to senior leadership and governance forums
- Influence prioritization based on risk severity and business impact
Required Skills & Experience
- Strong background in GRC, cyber risk, and vulnerability management
- Experience with application/platform vulnerabilities (non-OS)
- Knowledge of frameworks: ISO 27001, NIST, CIS
- Hands-on exposure to tools like Qualys, Tenable, Snyk, or similar
- Expertise in risk assessment, exception management, and compliance
- Strong stakeholder engagement and communication skills
- Familiarity with DevSecOps / SDLC security practices
Qualifications
Bachelor’s degree in IT / Cybersecurity or related field.
Cyber GRC Lead: Vulnerability & Risk Strategy in Melbourne employer: XPT Software Australia Pty Ltd
XPT Software Australia Pty Ltd is an exceptional employer, offering a dynamic work environment in the heart of Sydney, where innovation meets collaboration. With a strong focus on employee growth and development, we provide ample opportunities for career advancement through mentorship and leadership roles, particularly in the fast-evolving field of infrastructure services. Our commitment to service excellence and operational governance ensures that our team members are empowered to lead transformative projects while enjoying a supportive culture that values diversity and teamwork.
Contact Details:
XPT Software Australia Pty Ltd Recruitment Team
