Compliance

• Plan, coordinate, and deliver cybersecurity readiness, gap, and maturity assessments for commercial and regulated customers
• Assess organisations against ISO/IEC 27001, ASD Essential Eight, NIST Cybersecurity Framework 2.0, and ISO/IEC 42001
• Evaluate the design, implementation, and operating effectiveness of security, governance, and risk management controls
• Conduct stakeholder interviews, review policies and procedures, and examine technical evidence
• Identify control gaps, governance weaknesses, compliance risks, and improvement opportunities
• Prepare assessment reports, executive summaries, risk heatmaps, maturity assessments, control gap analyses, and prioritised recommendations
• Present findings and recommendations to senior executives and Board representatives
• Advise customers on risk treatment options, remediation priorities, and governance improvements
• Develop and maintain assessment templates, control testing procedures, evidence requirements, and reporting formats
• Apply quality assurance, peer review, and independent assessment principles
• Maintain assessment records, supporting evidence, and working papers
• Collaborate with cybersecurity, infrastructure, cloud, and operations teams to validate findings and evidence
• Develop remediation roadmaps and guide technical teams on governance and compliance requirements
• Validate remediation evidence and confirm identified gaps are addressed
• Support ongoing governance and assurance services, periodic control reviews, risk assessments, control monitoring, and compliance reporting
• Prepare recurring governance reports, risk dashboards, and management updates
• Participate in governance meetings, risk committee discussions, and executive reporting
• Conduct AI governance readiness and maturity assessments aligned with ISO/IEC 42001
• Evaluate AI governance policies, accountability structures, risk assessment processes, and oversight mechanisms
• Review data governance practices covering classification, handling, retention, access controls, and privacy obligations
• Assess customer practices against legislative and regulatory obligations, including Australian requirements
• Participate in customer discovery sessions, assessment workshops, and stakeholder interviews
• Manage assigned assessment activities against agreed timelines, quality standards, and deliverables
• Contribute to assessment scopes, delivery plans, customer proposals, and managed assurance service improvements

Explore Senior Governance, Risk & Compliance Consultant at Dijital Team. Review requirements and application details.