" \u003cdiv class=\"ja-job-details\"\u003e \u003ch2 class=\"title\"\u003eSenior Security Consultant (GRC)\u003c/h2\u003e \u003cdiv class=\"meta\"\u003e \u003cul class=\"classifications\"\u003e \u003cli data-id=\"14076\"\u003e IT Security \u003c/li\u003e \u003cli data-id=\"14077\"\u003e Permanent / Full Time \u003c/li\u003e \u003cli data-id=\"14078\"\u003e Sydney \u003c/li\u003e \u003c/ul\u003e \u003cp class=\"date-posted\"\u003e 14/10/2026 \u003c/p\u003e \u003c/div\u003e \u003cul class=\"bullet-points\"\u003e \u003cli\u003ePermanent role - Sydney based preferred\u003c/li\u003e \u003cli\u003eUp to $150K + Super DOE\u003c/li\u003e \u003cli\u003eA genuinely strong technical boutique consultancy\u003c/li\u003e \u003c/ul\u003e \u003cdiv class=\"description\"\u003e \u003cstrong\u003eThe Company\u003c/strong\u003e\u003cbr\u003e We\u0027re partnering with a boutique Australian cyber security consultancy whose reputation is built on genuine technical depth. Their team is known for hands-on expertise that goes well beyond theory. Global brands and ambitious organisations trust them with complex, high-stakes security problems.\u003cbr\u003e \u0026nbsp;\u003cbr\u003e Their advisory practice works the same way. No box-ticking, no recycled reports. Every piece of advice is grounded in a real understanding of how systems are built, how they fail and how attackers think.\u003cbr\u003e \u0026nbsp;\u003cbr\u003e \u003cstrong\u003eThe Role\u003c/strong\u003e\u003cbr\u003e This is a role for someone who started out building things and moved into cyber security advisory. You\u0027ll deliver strategy and GRC engagements, and your technical background will make your advice credible. You\u0027ll be equally comfortable reviewing an architecture diagram with an engineering team and explaining risk to an executive committee.\u003cbr\u003e \u0026nbsp;\u003cbr\u003e \u003cstrong\u003eWhat You\u0027ll Be Doing\u003c/strong\u003e\u003cbr\u003e \u003cul\u003e \u003cli\u003eBuilding and shaping enterprise cyber strategies and risk programs, not just assessing against them.\u003c/li\u003e \u003cli\u003eDelivering a broad mix of strategy, governance, risk and compliance engagements from scoping to final recommendations.\u003c/li\u003e \u003cli\u003eRunning tabletop exercises and workshops with technical teams and senior executives.\u003c/li\u003e \u003cli\u003eAssessing security architecture and design decisions, and turning findings into practical, prioritised guidance.\u003c/li\u003e \u003cli\u003eWriting policies, standards and control frameworks that engineering teams will adopt.\u003c/li\u003e \u003cli\u003eTaking frameworks such as ISO 27001, NIST CSF and the Essential Eight beyond compliance and making them fit the client\u0027s real environment.\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003eWhat You\u0027ll Bring\u003c/strong\u003e\u003cbr\u003e \u003cul\u003e \u003cli\u003eA technical foundation, ideally in software engineering, solution or architecture, or a similar hands-on discipline.\u003c/li\u003e \u003cli\u003e3+ years\u0027 experience in cyber security consulting or GRC, with cyber strategy experience a big plus.\u003c/li\u003e \u003cli\u003eBreadth across strategy and GRC engagements. If your experience is mostly repeat ISO or NIST assessments, this may not be the right fit.\u003c/li\u003e \u003cli\u003eConsulting experience with a Big 4 firm, a security boutique/\u003c/li\u003e \u003cli\u003eThe ability to dig into technical detail and still communicate clearly at board level.\u003c/li\u003e \u003cli\u003eA genuine passion for cyber strategy and risk, or for building a new capability from the ground up.\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003eWhy Join?\u003c/strong\u003e\u003cbr\u003e \u003cul\u003e \u003cli\u003eAdvisory work that is respected because it is technically strong.\u003c/li\u003e \u003cli\u003eA small, highly capable team where your contribution is visible and valued.\u003c/li\u003e \u003cli\u003eComplex, varied engagements across industries.\u003c/li\u003e \u003cli\u003eCareer growth and shaping the advisory practice.\u003c/li\u003e \u003cli\u003ePermanent role at $130k-$150k + Super, with flexible working.\u003c/li\u003e \u003c/ul\u003e \u0026nbsp;\u003cbr\u003e \u003cstrong\u003eLocation:\u003c/strong\u003e Sydney-based preferred, but open to remote candidates anywhere in Australia.\u003cbr\u003e \u003cstrong\u003eSalary:\u003c/strong\u003e $130,000 - $150,000 + Super, depending on experience.\u003cbr\u003e \u0026nbsp;\u003cbr\u003e \u003cstrong\u003eThis role is for you if\u003c/strong\u003e you want to change how organisations approach cyber risk, not just find your next job move. If you\u0027re energised by building, strategising and making a real impact through client work, we\u0027d love to hear from you.\u003cbr\u003e \u0026nbsp;\u003cbr\u003e Apply now, or send your CV to eirene@decipherbureau.com for a confidential chat. \u003c/div\u003e \u003cdiv class=\"apply\"\u003e \u003ca class=\"back-link\" href=\"#\" title=\"Back to search results\"\u003eBack to search results\u003c/a\u003e \u003cinput type=\"button\" class=\"ja-button\" data-job-id=\"4478435\" value=\"Apply Now\" title=\"Apply Now\" /\u003e \u003c/div\u003e \u003c/div\u003e "