GRC Technical Advisor

Our client is a central Queensland Government department responsible for supporting government priorities, strategic policy development and the delivery of outcomes across the Queensland public sector. Operating within a complex government environment, the department works closely with government agencies and stakeholders to support effective governance, strategic decision-making and the delivery of key initiatives. With a continued focus on strengthening its information security posture, the organisation is seeking an experienced GRC Technical Advisor to support its cybersecurity governance, risk and compliance activities. This engagement will focus on improving the department's Information Security Management System (ISMS), addressing identified control gaps and ensuring alignment with Queensland Government information security requirements and recognised industry standards.

As a GRC Technical Advisor, you'll play a key role in strengthening the department's information security governance and compliance position. This is a hands-on, delivery-focused contract where you'll review existing security controls, assess compliance gaps and drive practical remediation activities across the Information Security Management System (ISMS). Working closely with internal stakeholders, you'll conduct information security risk assessments, support IS18 and ISO 27001 alignment, and develop practical recommendations to improve the department's security maturity.

Key Responsibilities

• Review the existing Information Security Management System (ISMS), identifying control gaps, compliance deficiencies and areas requiring improvement.
• Drive ISMS remediation activities, addressing outstanding requirements, audit findings and information security control weaknesses.
• Conduct cybersecurity and information security risk assessments across business systems, processes and information assets.
• Assess existing security controls against Queensland Government Information Security Policy (IS18) and ISO 27001 requirements.
• Identify compliance gaps and develop practical remediation plans and risk treatment strategies.
• Review, develop and improve information security policies, standards, procedures and supporting ISMS documentation.
• Support the ongoing implementation, maintenance and continuous improvement of the department's ISMS.
• Maintain and contribute to risk registers, risk assessments, control documentation and compliance reporting.
• Provide technical GRC advice and recommendations to improve information security governance and risk management practices.
• Work collaboratively with technical teams, business stakeholders and governance functions to progress remediation activities.
• Prepare reports and supporting documentation outlining identified risks, control deficiencies and recommended actions.
• Support improvements to the department's overall cybersecurity maturity and compliance posture.

What You'll Bring

• Demonstrated experience in a Cybersecurity GRC, Information Security or Cyber Risk Advisory role.
• Strong hands-on experience managing, reviewing or remediating an Information Security Management System (ISMS).
• Demonstrated knowledge of Queensland Government Information Security Policy (IS18).
• Strong understanding of ISO 27001, including ISMS requirements, security controls, compliance and continuous improvement.
• Experience conducting information security and cybersecurity risk assessments.
• Proven ability to identify control deficiencies, assess compliance gaps and drive remediation activities through to completion.
• Experience supporting internal or external audits, including addressing audit findings and implementing corrective actions.
• Strong understanding of information security governance, policies, standards and risk treatment processes.
• Ability to develop and maintain risk registers, remediation plans and supporting compliance documentation.
• Strong stakeholder engagement skills, with the ability to communicate technical security requirements to both technical and non-technical audiences.
• A practical, delivery-oriented approach with the ability to work independently and achieve outcomes within tight timeframes.

Previous experience within Queensland Government or another public-sector environment will be highly regarded. Relevant certifications such as ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, CISM, CRISC or CISSP will also be advantageous.

What's in It for You?

• $1200 per day inclusive of superannuation
• Initial 3- month contract with a major Queensland Government department.
• Brisbane CBD location at 1 William Street.
• Ideally five days per week onsite, providing close collaboration with internal stakeholders.
• Opportunity to contribute to meaningful information security uplift within the Queensland public sector.
• Take ownership of ISMS remediation, risk assessments and compliance improvement activities.
• Work across recognised security frameworks, including IS18 and ISO 27001.
• Opportunity to deliver tangible outcomes and strengthen the department's information security maturity.

How to Apply

Applications are treated with absolute confidentiality. Click APPLY or contact Clodagh at clodagh@decipherbureau.com for an informal conversation about this opportunity. Equal opportunity and diversity are valued and encouraged.