" \u003cdiv class=\"ja-job-details\"\u003e \u003ch2 class=\"title\"\u003eGRC Technical Advisor\u003c/h2\u003e \u003cdiv class=\"meta\"\u003e \u003cul class=\"classifications\"\u003e \u003cli data-id=\"20749\"\u003e IT Security \u003c/li\u003e \u003cli data-id=\"20751\"\u003e Brisbane \u003c/li\u003e \u003cli data-id=\"20752\"\u003e Contract or Temp \u003c/li\u003e \u003c/ul\u003e \u003cp class=\"date-posted\"\u003e 5/11/2026 \u003c/p\u003e \u003c/div\u003e \u003cul class=\"bullet-points\"\u003e \u003cli\u003eLead ISMS remediation and cyber risk assessments\u003c/li\u003e \u003cli\u003eStrengthen security controls in line with IS18 and ISO 27001\u003c/li\u003e \u003cli\u003eInitial 3-month contract | $1,200/ day inc super | Brisbane CBD\u003c/li\u003e \u003c/ul\u003e \u003cdiv class=\"description\"\u003e \u003cdiv style=\"text-align:justify\"\u003e\u003cstrong\u003eSetting the Scene\u003c/strong\u003e\u003c/div\u003e \u003cdiv style=\"text-align:justify\"\u003eOur client is a central Queensland Government department responsible for supporting government priorities, strategic policy development and the delivery of outcomes across the Queensland public sector. Operating within a complex government environment, the department works closely with government agencies and stakeholders to support effective governance, strategic decision-making and the delivery of key initiatives. With a continued focus on strengthening its information security posture, the organisation is seeking an experienced GRC Technical Advisor to support its cybersecurity governance, risk and compliance activities. This engagement will focus on improving the department\u0027s Information Security Management System (ISMS), addressing identified control gaps and ensuring alignment with Queensland Government information security requirements and recognised industry standards.\u003cbr\u003e\u003cbr\u003e\u003c/div\u003e \u003cdiv style=\"text-align:justify\"\u003e\u003cstrong\u003e The Role\u003c/strong\u003e\u003c/div\u003e \u003cdiv style=\"text-align:justify\"\u003eAs a GRC Technical Advisor, you\u0027ll play a key role in strengthening the department\u0027s information security governance and compliance position. This is a hands-on, delivery-focused contract where you\u0027ll review existing security controls, assess compliance gaps and drive practical remediation activities across the Information Security Management System (ISMS). Working closely with internal stakeholders, you\u0027ll conduct information security risk assessments, support IS18 and ISO 27001 alignment, and develop practical recommendations to improve the department\u0027s security maturity.\u003c/div\u003e \u003cdiv style=\"text-align:justify\"\u003e\u003cbr\u003e\u003cstrong\u003eKey Responsibilities\u003c/strong\u003e \u003cul\u003e \u003cli\u003eReview the existing Information Security Management System (ISMS), identifying control gaps, compliance deficiencies and areas requiring improvement.\u003c/li\u003e \u003cli\u003eDrive ISMS remediation activities, addressing outstanding requirements, audit findings and information security control weaknesses.\u003c/li\u003e \u003cli\u003eConduct cybersecurity and information security risk assessments across business systems, processes and information assets.\u003c/li\u003e \u003cli\u003eAssess existing security controls against Queensland Government Information Security Policy (IS18) and ISO 27001 requirements.\u003c/li\u003e \u003cli\u003eIdentify compliance gaps and develop practical remediation plans and risk treatment strategies.\u003c/li\u003e \u003cli\u003eReview, develop and improve information security policies, standards, procedures and supporting ISMS documentation.\u003c/li\u003e \u003cli\u003eSupport the ongoing implementation, maintenance and continuous improvement of the department\u0027s ISMS.\u003c/li\u003e \u003cli\u003eMaintain and contribute to risk registers, risk assessments, control documentation and compliance reporting.\u003c/li\u003e \u003cli\u003eProvide technical GRC advice and recommendations to improve information security governance and risk management practices.\u003c/li\u003e \u003cli\u003eWork collaboratively with technical teams, business stakeholders and governance functions to progress remediation activities.\u003c/li\u003e \u003cli\u003ePrepare reports and supporting documentation outlining identified risks, control deficiencies and recommended actions.\u003c/li\u003e \u003cli\u003eSupport improvements to the department\u0027s overall cybersecurity maturity and compliance posture.\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003eWhat You\u0027ll Bring\u003c/strong\u003e \u003cul\u003e \u003cli\u003eDemonstrated experience in a Cybersecurity GRC, Information Security or Cyber Risk Advisory role.\u003c/li\u003e \u003cli\u003eStrong hands-on experience managing, reviewing or remediating an Information Security Management System (ISMS).\u003c/li\u003e \u003cli\u003eDemonstrated knowledge of Queensland Government Information Security Policy (IS18).\u003c/li\u003e \u003cli\u003eStrong understanding of ISO 27001, including ISMS requirements, security controls, compliance and continuous improvement.\u003c/li\u003e \u003cli\u003eExperience conducting information security and cybersecurity risk assessments.\u003c/li\u003e \u003cli\u003eProven ability to identify control deficiencies, assess compliance gaps and drive remediation activities through to completion.\u003c/li\u003e \u003cli\u003eExperience supporting internal or external audits, including addressing audit findings and implementing corrective actions.\u003c/li\u003e \u003cli\u003eStrong understanding of information security governance, policies, standards and risk treatment processes.\u003c/li\u003e \u003cli\u003eAbility to develop and maintain risk registers, remediation plans and supporting compliance documentation.\u003c/li\u003e \u003cli\u003eStrong stakeholder engagement skills, with the ability to communicate technical security requirements to both technical and non-technical audiences.\u003c/li\u003e \u003cli\u003eA practical, delivery-oriented approach with the ability to work independently and achieve outcomes within tight timeframes.\u003c/li\u003e \u003c/ul\u003e Previous experience within Queensland Government or another public-sector environment will be highly regarded. Relevant certifications such as ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, CISM, CRISC or CISSP will also be advantageous.\u003cbr\u003e\u003cbr\u003e\u003c/div\u003e \u003cdiv style=\"text-align:justify\"\u003e\u003cstrong\u003eWhat\u0027s in It for You?\u003c/strong\u003e \u003cul\u003e \u003cli\u003e$1200 per day inclusive of superannuation\u003c/li\u003e \u003cli\u003eInitial 3- month contract with a major Queensland Government department.\u003c/li\u003e \u003cli\u003eBrisbane CBD location at 1 William Street.\u003c/li\u003e \u003cli\u003eIdeally five days per week onsite, providing close collaboration with internal stakeholders.\u003c/li\u003e \u003cli\u003eOpportunity to contribute to meaningful information security uplift within the Queensland public sector.\u003c/li\u003e \u003cli\u003eTake ownership of ISMS remediation, risk assessments and compliance improvement activities.\u003c/li\u003e \u003cli\u003eWork across recognised security frameworks, including IS18 and ISO 27001.\u003c/li\u003e \u003cli\u003eOpportunity to deliver tangible outcomes and strengthen the department\u0027s information security maturity.\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003eHow to Apply \u003c/strong\u003e\u003c/div\u003e \u003cdiv style=\"text-align:justify\"\u003eApplications are treated with absolute confidentiality. Click \u003cstrong\u003eAPPLY\u003c/strong\u003e or contact \u003cstrong\u003eClodagh at \u003c/strong\u003e\u003cstrong\u003eclodagh@decipherbureau.com\u003c/strong\u003e for an informal conversation about this opportunity. Equal opportunity and diversity are valued and encouraged.\u003c/div\u003e \u003c/div\u003e \u003cdiv class=\"apply\"\u003e \u003ca class=\"back-link\" href=\"#\" title=\"Back to search results\"\u003eBack to search results\u003c/a\u003e \u003cinput type=\"button\" class=\"ja-button\" data-job-id=\"4483959\" value=\"Apply Now\" title=\"Apply Now\" /\u003e \u003c/div\u003e \u003c/div\u003e "