We are looking for an experienced Cybersecurity – GRC Consultant to join a high-performing security team and play a key role in strengthening application security governance, risk, and compliance across enterprise environments.
Key Responsibilities
Lead application security risk assessments and threat modelling activities
Conduct secure design reviews and security control assessments
Support compliance initiatives across ISO *****, ASD Essential Eight, ISM, SOC 2, PCI DSS, and related frameworks
Develop and maintain security policies, standards, and risk treatment plans
Partner with development, engineering, and architecture teams to embed secure-by-design practices
Support application security testing programs including SAST, DAST, penetration testing, and secure code reviews
Produce high-quality security assessments, risk reports, and accreditation artefacts
Mentor junior consultants and contribute to continuous improvement initiatives
Required Skills
Strong experience in Cybersecurity GRC and Application Security




Expertise in threat modelling and application security risk assessments
Knowledge of ASD ISM, Essential Eight, ISO *****, and similar frameworks
Experience supporting audits, accreditation, and assurance activities
Excellent stakeholder engagement and communication skills
Ability to operate independently at a senior consultant level
CISSP, CISM, CRISC, CCSK, GWAPT, GWEB, or similar certifications
Cloud security experience (AWS, Azure, or GCP)
Exposure to DevSecOps practices and tools
Experience within Government or Critical Infrastructure environments
Zone IT Solutions is an equal chance employer and our recruitment process focuses on essential skills and abilities.
We encourage applications from a diverse array of backgrounds, including individuals of various ethnicities, cultures, and linguistic backgrounds, as well as those with disabilities.
#J-*****-Ljbffr

📌 Cybersecurity Consultant – Grc (New South Wales)
🏢 Zone IT Solutions
📍 New South Wales