Manager - GRC

About this role

About CyberCX

CyberCX is the leading independent cyber security services organisation in Australia and New Zealand. We bring together the region’s most trusted cyber security companies to deliver end-to-end services to enterprise and government.

With 1400+ cyber security professionals across Australia, New Zealand, the UK and the US, we offer unmatched capability, deep expertise, and the opportunity to do meaningful work that helps secure our communities.

We are expanding in QLD and hiring across Senior Consultant to Manager levels. If you have the capability, problem-solving mindset, and drive, we want to hear from you. Titles are not the focus here.

You will gain strong leadership visibility, working closely with senior stakeholders on mission*-*focused security outcomes, supported by a highly experienced national team offering mentorship and coaching at a global scale.

What You'll Do

• Drive documentation uplift aligned to ISM while applying PSPF and DSPF frameworks to support compliance outcomes
• Support DCIAB certification processes and submissions
• Perform risk assessments (enterprise and ICT)
• Support security controls design, review and implementation
• Collaborate with stakeholders to deliver meaningful security outcomes

What You’ll Bring

• Background in cyber security, risk, or assurance
• Working knowledge of ISM, PSPF, DSPF, along with experience in Essential Eight and IRAP readiness
• Strong problem-solving mindset with technical orientation
• Defence or Defence Industry experience preferred
• NV1 clearance (mandatory)

Bonus: CISM, CRISC, CISSP, Commonwealth experience (DPN/DSE)

Why CyberCX

• Flexible hybrid working – balance your time between home and office.
• Retail & lifestyle discounts through our corporate partners.
• Unmatched career development within Australia and New Zealand’s largest cyber community.
• Impactful consulting work across diverse industries, helping clients strengthen their security posture in a rapidly evolving cyber landscape.

We kindly request no agency submissions for this role. Unsolicited CV’s will not be accepted, and no fees will be payable.

About cyber security & digital forensics roles for ex-police

Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.