Triskele Labs is a large-scale sovereign Australian cybersecurity provider. We deliver Managed Detection and Response (MDR), Digital Forensics and Incident Response (DFIR), offensive security, and Governance, Risk and Compliance (GRC) services to some of the most regulated and high-value organisations in Australia, across financial services, government, education, healthcare, and critical infrastructure. GRC excellence and operational discipline are core to how we win and keep clients.
About The Role
The Senior Security Consultant: GRC & Advisory delivers technical security assurance across cloud, hybrid and emerging technology environments, including AI. The role applies deep technical expertise to assess security controls, configurations, technical evidence and telemetry, identifying material risks and improvement priorities. It applies governance, risk and compliance knowledge to translate technical findings into practical recommendations and communicate their business significance to technical, executive and board stakeholders.
Responsibilities
Conduct technical security assurance across cloud, hybrid and emerging technology environments, including AI.
Assess the design and operating effectiveness of identity, infrastructure, endpoint, monitoring and security controls.
Analyse security configurations, technical evidence and telemetry to identify control weaknesses and material risks.
Conduct cybersecurity maturity, risk and compliance assessments aligned to frameworks such as CPS, NIST, ISO ***** and ASD Essential Eight/Essentials
Advise business stakeholders on regulatory obligations, industry standards and best practice controls, ensuring compliance across operations and projects
Plan and facilitate risk workshops, control assessments and compliance reviews, providing practical recommendations for improvement.
Design, implement and monitor policies, procedures and internal controls to support effective risk and compliance management




Contribute to technical assurance and GRC methodologies, service offerings, team mentoring, professional knowledge and industry engagement.
Requirements
The ideal candidate for the Senior GRC Consultant role will have;
Demonstrated experience in a senior technical security, cybersecurity assurance or technically focused GRC advisory role.
Experience assessing the design and operating effectiveness of security controls across cloud, hybrid and enterprise technology environments.
Practical experience with enterprise security capabilities across identity, cloud security, endpoint protection, security monitoring and threat detection.
Experience conducting cybersecurity assessments and developing strategies, roadmaps, governance frameworks, policies or standards. Prior experience developing cybersecurity strategies and roadmaps
Applied experience using industry standard security frameworks to drive cyber security, audit or assurance programs. For example: APRA CPS *******, ISO*****, ASD ISM, NIST Cyber Security Framework.
Experience translating complex technical findings into clear business risks and recommendations for technical, executive and board stakeholders.
Experience working with regulated or critical-infrastructure organisations.
The following certifications will be highly regarded
CISSP
Relevant cloud security, cybersecurity architecture, identity or security operations certification such as Microsoft, AWS or Google Cloud Security certifications
CISM, /CISA or CRISC
SABSA or an equivalent security architecture certification
ISO/IEC ***** Lead Implementer or Lead Auditor
ISO/IEC ***** Lead Implementer or Lead Auditor
Perks
A high-trust, high-accountability culture and direct exposure to leadership.
Competitive salary
Investment in training and certification
Hybrid working out of our Melbourne or Perth office.
Access to Triskele Labs Benefits Program
Triskele Labs is an equal opportunity employer and welcomes applications from candidates of all backgrounds.
#J-*****-Ljbffr

📌 Senior Grc Consultant (Perth)
🏢 Triskele Labs
📍 Perth