XPT Software Australia Pty Ltd | Contract
Melbourne, Australia | Posted on 06/16/2026
XPT SoftwareAustralia PTY Ltd, incorporated in ****, is a Software Services company
XPT works with topclients across Australia in Banking, Insurance, Telecom,Retail, Energy, Mining and Manufacturingdomains.
We have 120+technocrats in Australia working at our clientlocations.
XPT SoftwareAustralia is part of group companies which has globalpresence across India & Europe.
We have served100+ clients globally, fulfilling their onsite-offshoreneeds.
Job Description
Role Summary
We are seeking anexperiencedGRC Consultant – Cyber Leadto drive governance and maturityofnon-OS vulnerability managementacross enterprise application andplatform environments.
This role focuses oncyberrisk oversight, exception management, and vulnerability treatment strategy,ensuring risks are effectively assessed, governed, and aligned with enterprisesecurity standards—while remediation execution remains with delivery teams.
Key Responsibilities
Governance & Risk Oversight
Define and implementnon-OS vulnerability management frameworks,policies, and standards
Establishgovernance forums, escalation paths, anddecision-making processes
Ensure compliance withregulatory, audit, and enterprisesecurity requirements
Exception & Treatment Management
Manageremediation exceptions and risk acceptance lifecycle
Validatecompensating controls and residual risks
Driverisk-based treatment planswith application andplatform teams




Performrisk assessments for vulnerabilities that cannot beremediated
Enablerisk-based decision-making aligned to business riskappetite
Ensure properdocumentation, tracking, and periodic review ofaccepted risks
Tooling & Capability Uplift
Leadtooling strategy, evaluation, and automation initiatives
Improvevulnerability management maturity and processes
Supporttraining and adoption across delivery teams
Security Improvement & SDLC Integration
Oversee remediation outcomes frompen tests, audits, andassessments
Promotesecure-by-design and DevSecOps practices
Ensure vulnerabilities areidentified and treated beforeproduction release
Stakeholder Management
Collaborate withCyber, Application, Infrastructure, andOperations teams
Providerisk insights to senior leadership and governance forums
Influence prioritization based onrisk severity and businessimpact
Required Skills & Experience
Solid background inGRC, cyber risk, and vulnerabilitymanagement
Experience withapplication/platform vulnerabilities (non-OS)
Knowledge of frameworks:ISO *****, NIST, CIS
Hands-on exposure to tools likeQualys, Tenable, Snyk, orsimilar
Expertise inrisk assessment, exception management, andcompliance
Strongstakeholder engagement and communication skills
Familiarity withDevSecOps / SDLC security practices
Qualifications
Bachelor's degree inIT / Cybersecurity or related field
#J-*****-Ljbffr

📌 Grc Consultant - Cyber Lead (Melbourne)
🏢 Xpt Software Australia
📍 Melbourne