Grc Specialist - Brisbane

Great mix of responsibilities across team building and delivery

• Increased exposure to a variety of clients both in size and industry
• Working with a highly collaborative and expert team
• Responsibilities
• Help identify improvement opportunities for clients and write / QA reports for clients with recommendations for identified findings.
• Manage completion of each assignment, being accountable for high-quality standards, delivery within budget and on or before deadlines, while managing the progress of other assignments.
• Manage the engagement, mentor and coaching the team, and IT internal audit methodology compliance.
• Perform technology risk assessments, manage technical security related reviews, assess the effectiveness of processes / controls and risks related to third party organisations.
• Work closely with other Risk Advisory team members in delivery of reviews.
• Help improve internal processes, building towards efficient and standardised delivery across the team.
• Attend industry events regularly to learn, earmark potential recruits, network and identify opportunities.
• Support commercial opportunities when relevant.
• Knowledge and skills
• Experience performing and managing security risk assessments, testing or auditing of cybersecurity or information security standards or governance frameworks (e.g. one or more of COBIT, NIST Cyber Security Framework, ACSC Top 35 and Essential Eight, PCI DSS, CIS Critical Security Controls Top 18, PSPF, Information Security Manual, ISO / IEC 27001, Cloud Security Alliance Guidance, Australian Privacy Principles, GDPR).
• Experience in writing professional reports to communicate complex problems and present recommendations for change.
• Excellent oral communication and presentation skills.
• Able to confidently engage with clients, including their different business and technology stakeholders.
• Holds any of the listed professional certifications (e.g. CISM, CISA, CISSP, CRISC, ISO 27001 Lead Auditor, etc.)