We are looking for an experienced Cybersecurity – GRC Consultant to join a high-performing security team and play a key role in strengthening application security governance, risk, and compliance across enterprise environments.

Key Responsibilities

- Lead application security risk assessments and threat modelling activities
- Conduct secure design reviews and security control assessments
- Support compliance initiatives across ISO 27001, ASD Essential Eight, ISM, SOC 2, PCI DSS, and related frameworks
- Develop and maintain security policies, standards, and risk treatment plans
- Partner with development, engineering, and architecture teams to embed secure-by-design practices
- Support application security testing programs including SAST, DAST, penetration testing, and secure code reviews
- Produce high-quality security assessments, risk reports, and accreditation artefacts
- Mentor junior consultants and contribute to continuous improvement initiatives

Required Skills

- Strong experience in Cybersecurity GRC and Application Security




- Expertise in threat modelling and application security risk assessments
- Knowledge of ASD ISM, Essential Eight, ISO 27001, and similar frameworks
- Experience supporting audits, accreditation, and assurance activities
- Excellent stakeholder engagement and communication skills
- Ability to operate independently at a senior consultant level
- CISSP, CISM, CRISC, CCSK, GWAPT, GWEB, or similar certifications
- Cloud security experience (AWS, Azure, or GCP)
- Exposure to DevSecOps practices and tools
- Experience within Government or Critical Infrastructure environments

Zone IT Solutions is an equal prospect employer and our recruitment process focuses on essential skills and abilities. We encourage applications from a diverse array of backgrounds, including individuals of various ethnicities, cultures, and linguistic backgrounds, as well as those with disabilities.

#J-18808-Ljbffr

📌 Cybersecurity Consultant – GRC (City of Sydney)
🏢 Zone IT Solutions
📍 City of Sydney