Provides senior technical security assurance and GRC advisory services across cloud, hybrid, enterprise, and AI environments. Assesses security controls, configurations, evidence, telemetry, risks, compliance, and cybersecurity maturity against APRA, NIST, ISO 27001, and ASD frameworks. Leads risk workshops and compliance reviews, develops policies and governance frameworks, translates technical findings for executive and board stakeholders, and contributes to GRC methodologies, client delivery, mentoring, and professional development.
Triskele Labs is a large-scale sovereign Australian cybersecurity provider. We deliver Managed Detection and Response (MDR), Digital Forensics and Incident Response (DFIR), offensive security, and Governance, Risk and Compliance (GRC) services to some of the most regulated and high-value organisations in Australia, across financial services, government, education, healthcare, and critical infrastructure.
GRC excellence and operational discipline are core to how we win and keep clients.
About the Role
The Senior Security Consultant: GRC & Advisory delivers technical security assurance across cloud, hybrid and emerging technology environments, including AI. The role applies deep technical expertise to assess security controls, configurations, technical evidence and telemetry, identifying material risks and improvement priorities.
It applies governance, risk and compliance knowledge to translate technical findings into practical recommendations and communicate their business significance to technical, executive and board stakeholders.
Responsibilities
- Conduct technical security assurance across cloud, hybrid and emerging technology environments, including AI.
- Assess the design and operating effectiveness of identity, infrastructure, endpoint, monitoring and security controls.
- Analyse security configurations, technical evidence and telemetry to identify control weaknesses and material risks.
- Conduct cybersecurity maturity, risk and compliance assessments aligned to frameworks such as CPS, NIST, ISO 27001 and ASD Essential Eight/Essentials
- Advise business stakeholders on regulatory obligations, industry standards and best practice controls, ensuring compliance across operations and projects.
- Plan and facilitate risk workshops, control assessments and compliance reviews, providing practical recommendations for improvement.
- Design, implement and monitor policies, procedures and internal controls to support effective risk and compliance management.
- Contribute to technical assurance and GRC methodologies, service offerings, team mentoring, professional knowledge and industry engagement.
Requirements
The ideal candidate for the Senior GRC Consultant role will have;
- Demonstrated experience in a senior technical security, cybersecurity assurance or technically focused GRC advisory role.
- Experience assessing the design and operating effectiveness of security controls across cloud, hybrid and enterprise technology environments.
- Practical experience with enterprise security capabilities across identity, cloud security, endpoint protection, security monitoring and threat detection.
- Experience conducting cybersecurity assessments and developing strategies, roadmaps, governance frameworks, policies or standards. Prior experience developing cybersecurity strategies and roadmaps
- Applied experience using industry standard security frameworks to drive cyber security, audit or assurance programs. For example: APRA CPS 230/234, ISO27001, ASD ISM, NIST Cyber Security Framework.
- Experience translating complex technical findings into clear business risks and recommendations for technical, executive and board stakeholders.
- Experience working with regulated or critical-infrastructure organisations.
The position requires the following professional and behavioural capabilities;
- Excellent written and verbal communication skills, with the ability to adapt messaging to technical, operational, executive and board stakeholders. Excellent Written and Spoken English
- Ability to build credible and constructive working relationships with clients, stakeholders and internal delivery teams.
- Strong analytical, investigative and problem-solving skills to technical evidence, control weaknesses and cybersecurity risks.
- Sound professional judgement to identify material risks and develop proportionate, evidence-based recommendations.
- Naturally collaborative work style, maintaining a client-focused approach and demonstrating commitment to continuous technical and professional development
The following certifications will be highly regarded;
- CISSP
- Relevant cloud security, cybersecurity architecture, identity or security operations certification such as Microsoft, AWS or Google Cloud Security certifications
- CISM, /CISA or CRISC
- SABSA or an equivalent security architecture certification
- ISO/IEC 27001 Lead Implementer or Lead Auditor
- ISO/IEC 42001 Lead Implementer or Lead Auditor
Benefits
- A high-trust, high-accountability culture and direct exposure to leadership.
- Competitive salary
- Investment in training and certification
- Hybrid working out of our Melbourne or Perth office.
- Access to Triskele Labs Benefits Program
How to Apply
Please submit a CV and a short cover note addressed to Peter Gigengack, Head of GRC. Applications without a cover letter will not be considered.
Triskele Labs is an equal opportunity employer and welcomes applications from candidates of all backgrounds.
Triskele Labs Melbourne, Victoria, AUS Office
Melbourne, Australia
Similar Jobs
Blockchain • eCommerce • Fintech • Payments • Software • Financial Services • Cryptocurrency
Conduct outbound prospecting through cold calls, email, and social selling to identify prospective Square merchants. Manage and prioritize a business pipeline, understand merchant needs, present targeted solutions, qualify opportunities, document sales activity, and pass qualified leads to Account Executives. Meet or exceed monthly quotas while developing sales expertise through mentorship and career growth opportunities.
Artificial Intelligence • Fintech • Payments • Business Intelligence • Financial Services • Generative AI
Leads and develops a team of Account Managers serving SME and Growth customers. Drives revenue growth, retention, cross-sell, upsell, forecasting, account strategy, executive relationships, and customer outcomes. Partners cross-functionally with Sales, Product, Finance, Operations, Risk, Compliance, and Support while managing a portfolio of strategic customers and improving account-management processes.
Top Skills:
CRMSalesforce
Artificial Intelligence • Healthtech • Machine Learning • Natural Language Processing • Biotech • Pharmaceutical
Supports Pfizer CentreOne’s inside sales and marketing activities by reviewing and routing marketing-qualified leads, executing outreach sequences, documenting activity in Salesforce, and assisting with campaigns, content, meetings, reporting, and marketing projects. The role develops commercial expertise across marketing, inside sales, and business development while progressing leads toward initial meetings and BD handoff.
Top Skills:
HubspotExcelMicrosoft OutlookMicrosoft PowerpointMicrosoft SharepointMicrosoft TeamsMicrosoft WordSalesforce
What you need to know about the Melbourne Tech Scene
Home to 650 biotech companies, 10 major research institutes and nine universities, Melbourne is among one of the top cities for biotech. In fact, some of the greatest medical advancements were conceptualized and developed here, including Symex Lab's "lab-on-a-chip" solution that monitors hormones to predict ovulation for conception, and Denteric's vaccine for periodontal gum disease. Yet, the thousands of people working in the city's healthtech sector are just getting started, to say nothing of the tech advancements across all other sectors.
