- Build and lead a differentiated offensive security capability within our Cyber Resilience practice
- Shape an AI-enabled delivery model designed to scale locally and globally
- Work with global teams, strategic technology partners and clients to help organisations stay ahead of fast-evolving cyber threats

Grant Thornton Australia is one of Australia’s leading skilled services firms, providing audit, tax, and advisory services to a diverse range of clients.

Our culture is underpinned by a commitment to our clients, people and communities, and our promise to ‘Reach for Remarkable’ by providing proven expertise, principled execution, and personalised experience.

In Australia we're proud to support the careers of more than 1,500 remarkable people. Backed by six Australian offices and a global network spanning more than 150 markets, we offer the scale, connections and opportunities to help you shape your future, wherever it takes you.

About this role

Have you built and led client-facing penetration testing teams in professional services, but would do things differently if you had a blank sheet of paper today? We are seeking a commercially minded and forward-thinking Director, Offensive Security to help build, lead and scale our offensive security capability within Grant Thornton’s Cyber Resilience practice.

This is a unique opportunity for someone who understands how rapidly AI, automation, tooling and partner ecosystems are disrupting both cyber-attacks and offensive security delivery models and can translate that disruption into better client outcomes and a compelling growth prospect for the firm.

Working closely with local Partners, global teams and trusted technology partners,



you will develop a scalable offensive security, vulnerability management and Continuous Threat Exposure Management (CTEM) capability that combines deep technical credibility with practical commercial models.

You will help clients understand, validate and reduce their cyber risk profile through both point-in-time engagements and fully managed services, including penetration testing, red team and purple team exercises, adversary simulation, cloud and application security testing, vulnerability management, exposure prioritisation, continuous security validation, attack path analysis, and executive-level cyber resilience advice.

WhatYou’llDo:

- Build and lead the offensive security practice: Establish the strategy, service offerings, operating model, methods, quality standards and growth plan for a market-relevant offensive security team that delivers both point-in-time assurance and managed offensive security services.
- Scale through technology and partners: Develop an AI-enabled and partner-led delivery model that improves speed, quality, consistency and reach, while maintaining strong governance, assurance and client trust.
- Lead go-to-market activity: Shape propositions, campaigns, client conversations and commercial models that respond to local market needs while leveraging global Grant Thornton capability.
- Deliver trusted client outcomes:



Lead senior client relationships, translate technical findings into executive-level risk insight, and ensure offensive security work drives practical remediation and measurable resilience improvement.
- Modernise offensive security delivery: Identify how AI, automation, attack simulation, testing orchestration and continuous validation can evolve point-in-time testing into scalable, intelligence-led assurance.
- Grow vulnerability and exposure management services: Extend offensive security services into vulnerability management and Continuous Threat Exposure Management, helping clients identify attack surfaces, prioritise exploitable exposures, validate business impact and mobilise remediation through both targeted point-in-time assessments and ongoing managed exposure management services.
- Lead people and capability: Recruit, develop, coach and retain a high-performing team, creating a culture that values curiosity, technical excellence, collaboration, commercial discipline and responsible innovation.
- Collaborate across the firm: Work with cyber resilience, technology risk, incident response, managed security, global delivery teams and alliance partners to create integrated solutions for clients.

WhatYou’llBring:

- Senior offensive security experience: Significant experience in offensive security, penetration testing, red teaming, adversary simulation, security assurance or cyber consulting, including experience leading complex client engagements.
- Customer-facing consulting and sales capability: Proven ability to build trusted client relationships, originate and shape opportunities, develop proposals, lead pursuits, ma

📌 Director, Offensive Security (Sydney)
🏢 Grant Thornton
📍 Sydney