Senior Cyber Security GRC Specialist

Grant Thornton Australia is one of the worlds leading independently-owned and managed accounting advisory and consulting firms.

Our culture is underpinned by a commitment to our clients people and communities and our promise to Reach for Remarkable by providing proven expertise principled execution and personalised experience.

In Australia were proud to support the careers of over 1500 remarkable people. With six offices nationally and partner firms in more than 145 markets wherever you want to go we can take you there.

About this role

Join our Digital team and play a key role in protecting the firms digital assets and supporting business growth. This is a 12 month parental leave contract based in either Melbourne or Brisbane.

As a Senior Cyber Security GRC Specialist you will step into a critical role during a period of transition taking ownership of governance risk and compliance activities. This role requires a self-starter who can quickly embed into the environment and deliver immediate value.

You will lead cyber GRC initiatives maintain ISO27001 audit readiness and uplift the organisations security posture aligned to NIST CSF Essential Eight and Australian Privacy requirements.

Key responsibilities

• Supportand upliftthe firmsISO27001-aligned ISMS
• Maintain ISO27001 audit readiness and compliance activities
• Supportcyber risk register and treatment planupdates
• Support reviewingsupplier client and business risk assessments
• Monitor compliance withthe firmsframeworks andpolicies
• Develop GRC metrics and executive reporting
• Enhanceand managecyber awarenessprogramandquarterlyphishingsimulations
• Act as a trusted advisor to stakeholders across the business; embedding security into projects and procurement.
• Support privacy compliance and regulatory obligations
• Collaborate with Digital IT Risk & Compliance and global cyber teams

Skills & experience

• ISO27001 NIST CSF Essential Eight experience
• Cyber risk audit and compliance delivery
• Supplier and client risk assessment experience
• Strong stakeholder engagement and communication
• Relevant degree and/or certifications (CISSP CISM CRISC)
• ISO27001/42001 Lead Implementer / Lead AuditorCertification

Ifyoureinterested in this role butdontfeel that you match every single one of our requirements we would still love to hear from you and explore the unique skillset and attributes that you can bring to the team.

Reach your remarkable

At Grant Thornton we do things differently because we understand that when you strive for better and care about what you do remarkable things are dynamic and authentic mix of backgroundsperspectivesand ways of by our shared purpose we care for our people clients and communities and support them to thrive.

With usyoullbe exposed to challenging and rewarding opportunitiesbuildingyourconfidence and capabilities at every supported motivated and inspired by a team of passionate and caring collaborators and to builda career paththatstailored to you and encouragedto make a meaningfuldifference. Andwellmake sure the excellence you deliver and the impact you make is always seenfeltand celebrated.

Remarkableperksthat put you first:

• Flexible and hybrid working options
• Ongoing learning and development opportunities
• Inclusive high-performing team culture
• Inclusive diverse cyber security team
• Exposure to enterprise-wide cyber initiatives
• Opportunity to make immediate visible impact

Need some help applying or participating in the recruitment process

We are committed to ensuring our recruitment process is inclusive and accessible for anyone who wishes to apply and we warmly encourage applications from individuals from diverse backgrounds including Aboriginal and/or Torres Strait Islanders those in the LGBTQI community and individuals who identify as having disability or are neurodivergent. Click here for recruitment support information and to learn more about Diversity Equity and Inclusion at Grant Thornton.

Should you have questions or require any adaptations or additional support for your individual circumstances so you may perform at your best during the application or recruitment process please contact our Talent Acquisition team at

As we provide fair consideration and evaluation to a high volume of applications we endeavour to provide feedback on your application at the earliest opportunity.

#LI-Hybrid