Company Description Morrisec specializes in designing tailored security strategies and services that align with each organization’s unique threat landscape, risk profile, and strategic objectives. The company leverages extensive experience and a risk-based methodology to help clients address critical cybersecurity risks and meet complex compliance obligations. By integrating security with business priorities, Morrisec supports sustainable growth and resilience. Team members collaborate closely with clients to deliver practical, outcomes-focused security solutions. Role Description The Information Security GRC Consultant is a full time position based in Sydney, NSW. The consultant will assess and enhance clients’ governance, risk, and compliance frameworks, including policies, controls, and processes across information security and data protection. Day-to-day activities include performing risk assessments, aligning clients to relevant standards and regulations, and preparing recommendations and roadmaps for improvement. The role involves drafting and reviewing security policies, supporting implementation of information security management systems, and advising on compliance with data privacy and cybersecurity requirements. The consultant will work closely with client stakeholders to communicate findings, deliver reports,



and support audits and continuous improvement initiatives. Qualifications
• Strong knowledge of Information Security Management System (ISMS) frameworks and broader Information Security Management practices.
• Experience in Cybersecurity and Network Security, including understanding of common threats, vulnerabilities, and control measures.
• Competence in Data Privacy requirements and regulations, with the ability to translate legal and regulatory obligations into practical controls.
• Experience in Governance, Risk, and Compliance (GRC) activities, such as risk assessment, control design, policy development, and audit support.
• Familiarity with relevant standards and regulations (e.g., ISO 27001, NIST frameworks, privacy legislation) and their practical application.
• Strong analytical, documentation, and report-writing skills, with attention to detail and accuracy.
• Effective communication and stakeholder engagement skills, with the ability to present technical concepts in transparent, accessible language.
• Willingness to get involved in a company culture that dresses up for Halloween, goes on rides at Luna Park, and team building exercises such as pottery.

📌 Information Security GRC Consultant (Sydney)
🏢 Morrisec
📍 Sydney