- 3 month contract + extensions
- Sydney CBD - 2 days onsite
- Attractive Daily Rate

About Sekuro

We're a founder-led global consulting company in the cybersecurity market, operating across Australia, Asia, and the UK. Our reputation is built on breaking away from traditional consulting models, embracing a direct and fresh approach that puts clients at the centre of everything we do. Our mission is simple: to be our clients' most trusted security partner by delivering impactful outcomes that build resilience, enable innovation, and improve competitiveness.

Our vision is to be the world's most trusted security partner, enabling organisations to protect today and prepare for tomorrow. We exist to secure organisations, empowering them to thrive in a digital world.

We live by our values: we are brave, we raise the bar, we tell it how it is, we own the outcome, and we care for all.

The Role

- We are looking for an experienced security practitioner to conduct risk and threat assessments for the business, ranging from straightforward to highly complex use cases.
- This is a client-facing role where you will bring a strong governance and risk background paired with genuine technical depth, allowing you to move conversations beyond a pure compliance mindset and into meaningful risk-based decision making.
- You will be comfortable engaging with a broad range of stakeholders, translating assessment outcomes into practical, actionable guidance, and coaching technical teams through delivery and adoption. Familiarity with the OWASP Top 10 for LLMs and MITRE ATLAS will be important, as much of the current workload relates to the safe introduction of AI technologies, such as Claude, into the environment.




- You will need to guide the wider team on what good practice looks like in this space and help drive thinking that goes beyond the minimum compliance bar.

What You'll Do

- You will conduct risk and threat assessments against an existing backlog of requests that require review and action. These are predominantly AI use cases submitted by third-party providers and internal teams seeking to enable AI technologies across a variety of needs and levels of complexity.
- You will work closely with these stakeholders to understand context, identify risk, and provide clear, considered recommendations.
- You will also provide security and process improvement recommendations, working within existing processes to identify practical opportunities that strengthen operational processes, security controls, and governance arrangements.
- Where appropriate, you will draw on frameworks such as the NSW Government AI Assessment Framework (AIAF); experience here is a bonus but not a requirement.

What You'll Need

- You will bring proven experience conducting risk and threat assessments in a security context, ideally across a range of use cases and complexity levels.
- You will have a solid governance and risk background combined with technical expertise, giving you the credibility to guide both technical and non-technical stakeholders.
- Familiarity with the OWASP Top 10 for LLMs and MITRE ATLAS is important, as is an understanding of the risks and opportunities associated with introducing generative AI tools such as Claude into an enterprise environment.
- Strong stakeholder engagement skills are essential, along with the ability to communicate complex risk concepts in a practical, accessible way.
- You will be someone who can coach and influence technical teams through delivery and adoption, and who is comfortable identifying opportunities for improvement within existing processes rather than waiting for a formal mandate to do so.

Any questions? Give Tim Smith a call on (phone hidden)

📌 GRC Consultant (Sydney)
🏢 Sekuro
📍 Sydney