The Senior GRC Consultant is responsible for delivering high-quality governance, risk, and compliance engagements for Trinity Cyber Security customers. This role focuses on hands‐on consulting delivery, customer advisory, and supporting pre‐sales activities across a range of cybersecurity and compliance projects. The successful candidate will work closely with clients to assess security posture, identify risks, develop practical recommendations, and support compliance and security uplift initiatives aligned to industry frameworks and best practices.
Key responsibilities
Deliver GRC consulting engagements including risk assessments, maturity assessments, control reviews, policy development, and compliance uplift activities.
Support pre‐sales activities including client meetings, proposal development, scoping, and solution discussions.
Produce high-quality deliverables including reports, presentations, recommendations, and customer documentation.
Conduct workshops, interviews, and discovery sessions with customers and stakeholders.
Assist organisations in improving governance, risk management, and cybersecurity maturity.
Support security controls design, review, and implementation activities.
Work across recognised frameworks and standards such as ISO *****, ISO*****, NIST CSF, Essential Eight, PCI DSS, VPDSS, CPS 234, SOC 2, and related frameworks.
Collaborate with internal teams and contribute to the continuous improvement of Trinity's consulting capability.




Manage multiple engagements and priorities effectively while maintaining delivery quality and customer satisfaction.
About you
Minimum 3+ years' experience in governance, risk, compliance, cybersecurity consulting, IT audit, or related fields.
Experience delivering customer‐facing consulting or advisory engagements.
Experience producing high-quality written deliverables and reports.
Exposure to security governance, risk management, compliance assessments, or cyber uplift programs.
Solid understanding of governance, risk, and compliance frameworks.
Knowledge of frameworks such as ISO *****, ISO*****, NIST CSF, Essential Eight, PCI DSS, CPS 234, and SOC 2.
Ability to assess cyber controls across cloud, network, identity, and organisational domains.
Robust written and verbal communication skills.
Ability to articulate risks, business impacts, and recommended controls clearly to both technical and non‐technical stakeholders.
Strong attention to details with a focus on documentation quality and customer outcomes.
About us
Trinity is a boutique Cyber Security business with a mission to make the cybersecurity journey understandable and accessible to all. Backed by key customers and experiencing organic growth, we're expanding our team. We are a team that values innovation, technical excellence, and continuous learning, with a flexible, supportive work environment that puts people first.
#J-*****-Ljbffr

📌 Senior Grc Consultant (Melbourne)
🏢 Trinity Cyber Security
📍 Melbourne