search Browse Jobs
Senior GRC / Security Consultant3Columns · Sydney, New South Wales, Australia
3Columns logo

3Columns

company page ↗

Senior GRC / Security Consultant

🗓️ Posted 2026-09-14 Sydney, New South Wales, Australia Full-time Hybrid ICT
💰 Salary Not shared 📊 Market A$10,833–A$15,000/mo

About the Company

3Columns is a specialist cybersecurity firm delivering a wide range of services, including Security Assurance, Security Governance, Professional Services, and Managed Services. We offer Managed Security Services, Offensive Security Services, Cyber Security Consulting, and professional services to help customers deploy the required controls. The SOC provides Managed Detection & Response and Incident Response.

About the Job

3Columns is seeking a Senior GRC/ Cybersecurity Consultant to join the team. They will be responsible for delivering outcome-based engagements for a variety of clients and proactively improving Governance, Risk & Compliance capabilities within the organisations they engage with. The Senior Security Consultant will lead small to large projects, helping clients develop and implement cybersecurity risk mitigation strategies to support the business and drive the success of organisational strategies. The successful applicant will become an integral part of each client's cybersecurity strategy, developing strong relationships and becoming a trusted partner within each organisation.

Requirements

Education

  • ● Must be forward-thinking in terms of vision for the business and team culture
  • ● You will also be a strategic and innovative thinker with strong organisational skills and an understanding of

Experience

  • ● Strong experience with ISO27001, NIST and ASD8 Audits and policy documentation
  • ● Experience in conducting Third-Party assessments
  • ● Must have experience in working with consulting companies and with multiple customers and projects at the same time
  • ● You will have a proven track record in an Information Security, IT Audit, Risk or Compliance field

Skills

  • ● Ability to apply and audit cybersecurity frameworks such as ISO/IEC 27001,31000, ASD8 and NIST
  • ● Ability to take organisations on their cybersecurity journey
  • ● Good understanding of GDPR and PCI-DSS, ISM, RFFR, SOC 2
  • ● Ability to develop and utilise the company's methodologies to provide effective cybersecurity and risk advice
  • ● Ability to articulate business implications and accurately calculate risks of findings in relation to the business
  • ● Ability to develop and deliver training and/or speaking material for public and/or private events
  • ● Proactively researching emerging security risks and controls
  • ● Excellent written and verbal skills to clearly explain concepts in non-technical terms
Show 11 more
  • ● Consulting Skills with a wide range of audiences
  • ● Strong communication and writing skills
  • ● Ability to translate IT and technical risks into business risk for the C-Level and Board
  • ● Strong understanding of commercial arrangements for small to large projects and able to demonstrate the value of service offerings to clients
  • ● Identifying and articulating security advice aimed at employees, managers and executives
  • ● Come up with innovative ideas to deliver services to the customer
  • ● Ability to speak about security and recommend security controls to experienced security professionals and executives confidently and accurately
  • ● The ability to work as part of the team
  • ● Flexibility and motivation to work across various types of engagements
  • ● The ability to multitask and service multiple clients at once
  • ● Is detail-oriented, self-motivated and can work independently