> Markdown version of [/jobs/ext/4509726-grc-and-advisory-consultant](https://www.wearedevelopers.com/jobs/ext/4509726-grc-and-advisory-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# GRC and Advisory Consultant

- **Company:** DXC Technology
- **Location:** Brisbane, CA, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Cyber Security, Linux, Network Security, National Institute of Standards and Technology Cybersecurity Framework, Information Technology, Cybercrime, Operating System Security
- **Published:** November 1, 2026
- **Apply:** https://www.adzuna.com/details/5887359773

## About the Role

* 5+ years IT experience, including 2-4 years in Information Security, Risk, Audit or similar
 * Bachelor's or Master's degree (or equivalent demonstrated experience)
 * Strong knowledge of key security standards: PSPF, ISM, Essential 8, DSPF, ISO 27000, NIST CSF/800 series, CIS
 * Experience advising internal teams and clients on security and compliance requirements
 * Proven ability to write security policies and procedures aligned to ISM and PSPF
 * Hands-on experience implementing Essential 8 controls
 * IRAP pre-assessment and certification/accreditation experience
 * Solid understanding of internet, application, web and network security
 * Experience with OS security (Windows, Linux, etc.)
 * Strong background in cybersecurity GRC
 * Knowledge of risk management frameworks and methodologies
 * Skilled in producing high-quality technical documentation
 * Ability to communicate effectively with technical and non-technical stakeholders
 * NV1 Security Clearance (mandatory)

Desirable Criteria

 * Experience supporting or mentoring a small team of security consultants
 * Ability to uplift security assurance across government, business and vendor environments
 * Strong capability in detecting, deterring and responding to cyber threats
 * Technical writing capability
 * IRAP Assessor (desirable but not essential)
 * Working toward certifications such as CISSP, CISA, CISM, IRAP, GSEC