Talent.com
XPT Software Australia Pty Ltd
GRC Consultant - Cyber LeadXPT Software Australia Pty Ltd • Melbourne, VIC, AU
GRC Consultant - Cyber Lead

GRC Consultant - Cyber Lead

XPT Software Australia Pty Ltd • Melbourne, VIC, AU
30+ days ago
Job description

Job Description

XPT Software Australia Pty Ltd | Contract

\n

Melbourne, Australia | Posted on 06/16/2026

\n

    \n
  • XPT SoftwareAustralia PTY Ltd, incorporated in 2016, is a Software Services company
  • \n
  • XPT works with topclients across Australia in Banking, Insurance, Telecom,Retail, Energy, Mining and Manufacturingdomains.
  • \n
  • We have 120+technocrats in Australia working at our clientlocations.
  • \n
  • XPT SoftwareAustralia is part of group companies which has globalpresence across India & Europe.
  • \n
  • We have served100+ clients globally, fulfilling their onsite-offshoreneeds.
  • \n

\n

Job Description

\n

Role Summary

\n

We are seeking anexperienced GRC Consultant – Cyber Lead to drive governance and maturityof non-OS vulnerability management across enterprise application andplatform environments.

\n

This role focuses on cyberrisk oversight, exception management, and vulnerability treatment strategy,ensuring risks are effectively assessed, governed, and aligned with enterprisesecurity standards—while remediation execution remains with delivery teams.

\n

Key Responsibilities

\n

Governance & Risk Oversight

\n

    \n
  • Define and implement non-OS vulnerability management frameworks,policies, and standards
  • \n
  • Establish governance forums, escalation paths, anddecision-making processes
  • \n
  • Ensure compliance with regulatory, audit, and enterprisesecurity requirements
  • \n

\n

Exception & Treatment Management

\n

    \n
  • Manage remediation exceptions and risk acceptance lifecycle
  • \n
  • Validate compensating controls and residual risks
  • \n
  • Drive risk-based treatment plans with application andplatform teams
  • \n
  • Perform risk assessments for vulnerabilities that cannot beremediated
  • \n
  • Enable risk-based decision-making aligned to business riskappetite
  • \n
  • Ensure proper documentation, tracking, and periodic review ofaccepted risks
  • \n

\n

Tooling & Capability Uplift

\n

    \n
  • Lead tooling strategy, evaluation, and automation initiatives
  • \n
  • Improve vulnerability management maturity and processes
  • \n
  • Support training and adoption across delivery teams
  • \n

\n

Security Improvement & SDLC Integration

\n

    \n
  • Oversee remediation outcomes from pen tests, audits, andassessments
  • \n
  • Promote secure-by-design and DevSecOps practices
  • \n
  • Ensure vulnerabilities are identified and treated beforeproduction release
  • \n

\n

Stakeholder Management

\n

    \n
  • Collaborate with Cyber, Application, Infrastructure, andOperations teams
  • \n
  • Provide risk insights to senior leadership and governance forums
  • \n
  • Influence prioritization based on risk severity and businessimpact
  • \n

\n

Required Skills & Experience

\n

    \n
  • Strong background in GRC, cyber risk, and vulnerabilitymanagement
  • \n
  • Experience with application/platform vulnerabilities (non-OS)
  • \n
  • Knowledge of frameworks: ISO 27001, NIST, CIS
  • \n
  • Hands-on exposure to tools like Qualys, Tenable, Snyk, orsimilar
  • \n
  • Expertise in risk assessment, exception management, andcompliance
  • \n
  • Strong stakeholder engagement and communication skills
  • \n
  • Familiarity with DevSecOps / SDLC security practices
  • \n

\n

Qualifications

\n

    \n
  • Bachelor's degree in IT / Cybersecurity or related field
  • \n
Create a job alert for this search

GRC Consultant - Cyber Lead • Melbourne, VIC, AU

Similar jobs

Cyber Security Consultant

ITbilityMelbourne, AU

Cyber Security Risk Assurance Lead.Ability to understand security findings and concepts from a variety of sources such as Secure Coding, Secure Architecture, Secure Testing, Partner Security etc.Pr... Show more

 • Promoted

Senior P&R TechOne CiAnywhere Consultant | Hybrid, Growth

AtturraMelbourne, AU

Atturra is expanding its Business Applications team and seeking experienced Property & Rating professionals for a consulting role.Your focus will be on implementing, upgrading, and supporting Techn... Show more

 • Promoted

Cyber GRC Analyst

AusNetMelbourne, AU

Be among the first 25 applicants.Direct message the job poster from AusNet.Talent Acquisition Leader I Recruitment Manager | Talent Partner.Play a pivotal role in Cyber Governance, Risk, and Compli... Show more

 • Promoted

GRC & Security Analyst: Cyber Resilience Champion

Education Services Australia (ESA)Melbourne, AU

A national education services organization is looking for a skilled Governance, Risk, Compliance (GRC) & Security Analyst to enhance security practices and build a risk-aware culture.Responsibiliti... Show more

 • Promoted

Azure Cloud Strategy Lead | Principal Consultant (Contract)

DatacomMelbourne, AU

A leading IT services company is seeking a Principal Cloud Consultant to deliver expert architecture and advisory services focused on Microsoft Azure technologies.This role, based in Melbourne, is ... Show more

 • Promoted

Regional Cybersecurity Sales Leader for Net-New Growth

Palo Alto Networks, Inc.Melbourne, AU

Palo Alto Networks is seeking a Regional Sales Manager in Melbourne to drive net new customer acquisition and revenue growth across a defined territory.You will lead and execute strategic account p... Show more

 • Promoted

Threat Intelligence Consultant

Kaizen Global TechnologiesMelbourne, AU

Platform Delivery & Integration:.Deploy and configure a state-of-the-art Threat Intelligence Platform, ensuring seamless data migration and integration.Define Priority Intelligence Requirements, es... Show more

 • Promoted

Director, IAM & PAM Project Lead — CyberArk

Tata Consultancy ServicesMelbourne, AU

A leading IT services company in Melbourne is seeking an experienced HR Executive to manage cybersecurity projects with a focus on CyberArk PAM.The ideal candidate will have a strong background in ... Show more

 • Promoted

Tech Lead

Two CirclesMelbourne, AU

We are a Sports & Entertainment Marketing business.We grow audiences and revenues.We do that by knowing fans best.We work with clients to help them understand & influence what their fans are doing ... Show more

 • Promoted

Squad Lead - Cyber Threat Defence

MedibankMelbourne, AU

Squad Lead - Cyber Threat Defence.Be among the first 25 applicants.Squad Lead - Cyber Threat Defence.Get AI-powered advice on this job and more exclusive features.It’s a strange thing to say, becau... Show more

 • Promoted

Global CRM Architect: Omnichannel Growth

TALENTD RecruitmentMelbourne, AU

A leading recruitment agency seeks a Global CRM Manager to establish and lead a new CRM programme for an activewear brand.The ideal candidate has 8+ years of experience in CRM and a proven record i... Show more

 • Promoted

Team Lead - Power Grid Assets Australia

DNVMelbourne, AU

We are the independent expert in assurance and risk management.Driven by our purpose, to safeguard life, property, and the environment, we empower our customers and their stakeholders with facts an... Show more

 • Promoted

Senior Cyber Risk & Advisory Lead

Scyne AdvisoryMelbourne, AU

A public purpose sector consultancy in Melbourne seeks a Cyber Advisory Consultant to enhance public trust in government digital services.You will manage cyber risks, advise clients on strategic ch... Show more

 • Promoted

Dynamics 365 Tech Lead - Contract, Drive Outcomes

ALOIS AustraliaMelbourne, AU

A technology consulting firm in Melbourne seeks a Mid-Senior level Microsoft Dynamics Consultant.The role requires individuals to take ownership and accountability, with strong communication skills... Show more

 • Promoted

Digital Identity Specialist (Consultant/Architect)

AvanadeMelbourne, AU

At Avanade, cybersecurity consultants are innovators, and challengers of the status quo.At Avanade, cybersecurity consultants are innovators, and challengers of the status quo.In a client-facing co... Show more

 • Promoted

GRC Security Lead (Hybrid) — Policy & Compliance

EmmbrMelbourne, AU

A global distribution organisation is seeking a GRC Specialist to enhance governance, risk, and compliance capabilities within their cybersecurity function.This full-time role in Melbourne requires... Show more

 • Promoted

Growth Marketing Lead - FinTech & Crypto

CloudTech GroupMelbourne, AU

CloudTechX is a blockchain-based financial technology platform specialising in over-the-counter (OTC) trading and near-instant settlement services.The core offering revolves around fast, compliant ... Show more

 • Promoted

Dynamics 365 CRM & Power Pages Lead — Tech Delivery Leader

AmpstekMelbourne, AU

A leading IT services firm in Melbourne seeks a Dynamics 365 CRM and Power Pages Portal Lead to oversee technical designs and deliver solutions across agile teams.The role demands over six years of... Show more

 • Promoted

P&C Digital Partner

AGL EnergyMelbourne, AU

Join our team as a Digital Services Partner and play a key role in shaping and continuously improving the employee Workday experience at AGL.In this role, you’ll lead innovative initiatives as a fu... Show more

 • Promoted

V-Lead Technical Consultant

WNS Global ServicesMelbourne, AU

WNS (Holdings) Limited (NYSE: WNS), is a leading Business Process Management (BPM) company.We combine our deep industry knowledge with technology and analytics expertise to co-create innovative, di... Show more