Senior Governance, Risk & Compliance (GRC) Consultant

At least eight years of experience in Governance, Risk & Compliance, cybersecurity assurance, internal audit, technology risk, or risk consulting Proven experience delivering client-facing cybersecurity risk, compliance, and maturity assessments Ability to independently conduct stakeholder interviews, gather and evaluate evidence, assess controls, and document findings Experience preparing detailed assessment reports, executive risk summaries, and prioritised remediation recommendations Strong understanding of cybersecurity governance, enterprise risk management, and compliance principles Experience collaborating with technical engineers, cybersecurity specialists, business stakeholders, and senior leadership Ability to manage multiple assessment activities while maintaining high standards of accuracy and professionalism Cybersecurity Frameworks & Risk Management Strong working knowledge of ISO/IEC 27001, including ISMS requirements, risk assessment, control evaluation, and implementation maturity Demonstrated experience assessing organisations against the ASD Essential Eight maturity model Strong understanding of NIST Cybersecurity Framework 2.0 and its application to risk management and organisational maturity Experience conducting control gap analyses, cybersecurity maturity assessments, and compliance readiness reviews Understanding of risk registers, inherent and residual risk, control effectiveness, and risk treatment strategies Knowledge of cybersecurity govern