GRC Advisor [T500-19320]

Description

• Advise on secure solution architectures, identify potential risks in designs, and propose effective countermeasures.
• Engage effectively with stakeholders across REA, understanding their needs and championing good security practices.
• Assist in investigating suspected attacks and support our incident response efforts with your security expertise.
• Provide detailed and specific advice on security topics where you have expertise, helping teams make informed decisions.
• Work with delivery partners and internal teams to clearly communicate security requirements and ensure they're met.
• Help maintain and optimize operational security processes, especially for our cloud and automated systems.
• Perform technical security control assessments and contribute to ensuring our key systems meet security standards and compliance needs.
• Contribute to our vulnerability assessment efforts by analysing assets, performing assessments, and helping teams adopt the right controls.
• You can manage your advisory workload, contribute effectively to projects, and keep good records.
• Help teams navigate security for their projects and systems, making sense of controls (technical, procedural, physical) and risks.
• Conduct cyber risk assessments, third-party due diligence and Business Impact Analyses (BIAs) for new tech and systems, designing smart ways to manage those risks.

Requirements

We are committed to providing a working environment that embraces and values diversity, equity and inclusion. We believe teams with diverse ideas and experiences are more creative, more e?ective and fuel disruptive thinking - be it cultural and ethnic backgrounds, gender identity, disability, age, sexual orientation, or any other identity or lived experience. We know diverse teams are critical to maintaining our success and driving new business opportunities. If you've got the skills, dedication and enthusiasm to learn but don't necessarily meet every single point on the job description, please still get in touch.

• Experience performing security risk assessments, technical security assessments, or contributing to assurance / accreditation activities.
• Knowledge of frameworks like NIST, ISO 27001, or specific compliance areas (e.g., PCI, Privacy)
• Solid understanding of security controls, risk assessment methodologies, and Business Impact Analysis.
• You can spot potential security issues in designs, processes, and systems and suggest practical, effective solutions.
• You're keen to stay updated on security trends, threats, and best practices.
• You’ve got experience working with different cloud environments like AWS, Google or Azure.
• Can break down security concepts, risks, and requirements for diverse audiences.
• You can work effectively with stakeholders, understand their perspectives, and provide valuable, respected advice.
• You enjoy working with different teams (tech, business, partners) to embed security and achieve shared goals.
• Maybe it's cloud security, application security, identity, or a specific GRC area – we value focused expertise.

Benefits

• Flexible leave options including parental leave, family care leave and celebration leave.
• Programs to support mental, emotional, financial and physical health & wellbeing.
• Continuous learning and development opportunities to further your technical expertise.
• A hybrid and flexible approach to working.
• Insurance for you and your immediate family members.
• Transport options to help you get to and from work, including home pick-up and drop-off.
• Meals provided on site in our office.

Training + Development

Interview process

Visa Sponsorship

Security clearance