RemoteLeaf Logo
Log in Sign up

Senior Governance, Risk & Compliance (GRC) Consultant

1 day, 4 hours ago
Sri Lanka
Full-time
Senior
Penetration Tester
Cybersecurity
Apply Now
Dijital Team

Dijital Team

Join Dijital Team, the globally recognized A-Team for IT Services. Explore our open positions and stay ahead in your career.

Internet Software & Services
11-50
Founded 2023
View All Jobs 17

Description

  • Plan and deliver cybersecurity readiness, gap, maturity, and compliance assessments.
  • Assess controls and organisations against ISO/IEC 27001, ASD Essential Eight, NIST CSF 2.0, ISO/IEC 42001, and applicable regulations.
  • Conduct stakeholder interviews, review policies, and evaluate technical and documentary evidence.
  • Prepare assessment reports, executive summaries, risk dashboards, maturity analyses, and remediation roadmaps.
  • Translate technical findings into business risks, regulatory impacts, and prioritised recommendations.
  • Develop and improve assessment methodologies, templates, evidence standards, and quality assurance processes.
  • Collaborate with technical, cloud, infrastructure, operations, and client leadership teams to validate findings and remediation.
  • Support continuous governance, risk monitoring, compliance reporting, and customer assurance services.
  • Assess AI governance, data protection, privacy, accountability, and responsible AI controls.
  • Present findings to executives, Boards, risk committees, and other customer stakeholders.

Requirements

  • At least 8 years of experience in GRC, cybersecurity assurance, internal audit, technology risk, or risk consulting.
  • Experience delivering client-facing cybersecurity risk, compliance, and maturity assessments.
  • Strong knowledge of ISO/IEC 27001, ASD Essential Eight, and NIST Cybersecurity Framework 2.0.
  • Experience with ISO/IEC 42001, AI governance, data governance, or related risk and compliance disciplines.
  • Knowledge of risk registers, control effectiveness, control testing, evidence management, and risk treatment strategies.
  • Understanding of cybersecurity governance, incident management, third-party risk, business continuity, disaster recovery, privacy, and data protection.
  • Experience with Australian regulatory requirements such as APRA CPS 234, APRA CPS 230, the Security of Critical Infrastructure Act, and the Privacy Act 1988 is desirable.
  • Exceptional written English, executive reporting, presentation, workshop facilitation, and stakeholder engagement skills.
  • Ability to produce objective, evidence-based, traceable, and defensible assessment conclusions.
  • Preferred certifications include ISO/IEC 27001 Lead Auditor or Lead Implementer, CISA, CISM, CRISC, AIGP, AAIA, or ISO/IEC 42001 Lead Auditor or Lead Implementer.
  • Experience with GRC platforms, Microsoft Purview, Microsoft Defender, Microsoft Entra ID, Azure governance, SOC 2, ISO/IEC 27701, or ISO 22301 is beneficial.

Benefits

  • Payment in Australian Dollars.
  • Medical insurance from day one for employees and eligible family members.
  • Generous outpatient medical coverage.
  • Home office setup and internet allowances.
  • Gym and wellness allowance.
  • Mental health and counselling support through Diji Assist.
  • Flexible home or office working arrangements.
  • Reimbursement for industry certifications, team events, rewards, and recognition programs.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Innovaccer

4745-Security Engineer II (GRC)

Innovaccer 1K-5K IT Services

Innovaccer is hiring a Security Engineer II (GRC) to support governance, risk, and compliance programs across healthcare, public-sector, customer, and cloud environments.

United States Full-time Mid Level Penetration Tester
AWS Azure Cybersecurity HIPAA
5 hours, 6 minutes ago
TEHORA

Conseiller en sécurité informatique

TEHORA 1-10 Construction & Engineering

TEHORA recherche un conseiller ou une conseillère senior en sécurité informatique pour protéger les actifs informationnels, renforcer la posture de cybersécurité et soutenir la conformité aux normes de l’industrie pour ses clients.

Canada Full-time Senior Penetration Tester
Active Directory Cisco Cybersecurity Encryption Linux Metasploit Network Security Nmap Penetration Testing Wireshark
1 day, 5 hours ago
C-Serv

Senior Consultant - F5 Distributed Cloud (XC)

C-Serv 11-50 Internet Software & Services

C-Serv is hiring a Costa Rica-based, full-time remote F5 Distributed Cloud Engineer to design and deliver secure multi-cloud networking and application protection solutions for global enterprise clients.

Costa Rica Full-time Senior Penetration Tester
Ansible AWS Azure DNS GCP Kubernetes Network Security Terraform
6 days, 5 hours ago
VerTalents

Sr. Offensive Security Consultant (Alpha Group)

VerTalents Internet Software & Services

VerSprite, through VerTALENTS, is seeking a remote U.S.-based Senior Offensive Security Consultant to lead advanced penetration testing, application security, and red team engagements for enterprise clients.

United States Full-time Senior Penetration Tester
Active Directory Android AWS Azure iOS Penetration Testing
1 week, 2 days ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers