We are looking for an experienced Cybersecurity – GRC Consultant to join a high-performing security team and play a key role in strengthening application security governance, risk, and compliance across enterprise environments.

Key Responsibilities
Lead application security risk assessments and threat modelling activities
Conduct secure design reviews and security control assessments
Support compliance initiatives across ISO 27001, ASD Essential Eight, ISM, SOC 2, PCI DSS, and related frameworks
Develop and maintain security policies, standards, and risk treatment plans
Partner with development, engineering, and architecture teams to embed secure-by-design practices
Support application security testing programs including SAST, DAST, penetration testing, and secure code reviews
Produce high-quality security assessments, risk reports, and accreditation artefacts
Mentor junior consultants and contribute to continuous improvement initiatives

Required Skills
Solid experience in Cybersecurity GRC and Application Security




Expertise in threat modelling and application security risk assessments
Knowledge of ASD ISM, Essential Eight, ISO 27001, and similar frameworks
Experience supporting audits, accreditation, and assurance activities
Excellent stakeholder engagement and communication skills
Ability to operate independently at a senior consultant level
CISSP, CISM, CRISC, CCSK, GWAPT, GWEB, or similar certifications
Cloud security experience (AWS, Azure, or GCP)
Exposure to DevSecOps practices and tools
Experience within Government or Critical Infrastructure environments

Zone IT Solutions is an equal chance employer and our recruitment process focuses on essential skills and abilities. We encourage applications from a diverse array of backgrounds, including individuals of various ethnicities, cultures, and linguistic backgrounds, as well as those with disabilities.
J-18808-Ljbffr

📌 Cybersecurity Consultant – Grc City Of Sydney
🏢 Zone IT Solutions
📍 City of Sydney