GRC Consultant

About the Role

We are looking for a GRC Consultant with approximately 2–4 years of experience who is excited about working in an AI-native environment. You will use AI-powered workflows for policy development, evidence collection, control assessments, gap analysis and audit preparation; validate outputs; solve complex issues; and help customers navigate their certification and audit journeys. You will work closely with leadership and contribute to improving our delivery model.

About Cyber Ally

Cyber Ally is a cybersecurity and compliance consultancy helping businesses achieve and maintain compliance with frameworks including ISO 27001, SOC 2 and ISO 42001. We are transforming how compliance services are delivered by combining experienced GRC professionals with agentic functions, automation and modern technology. Our goal is to eliminate repetitive compliance administration so consultants can focus on sound judgment, meaningful security improvements and excellent customer outcomes.

Key Responsibilities

GRC and Compliance Delivery

• Support customers implementing and maintaining ISO 27001, SOC 2 and other frameworks.

• Conduct gap assessments, risk assessments and control reviews.

• Review and validate policies, procedures and compliance documentation.

• Coordinate evidence collection and assess evidence against requirements.

• Prepare customers for certification and assurance audits; liaise with auditors.

• Track compliance activities, risks and deadlines.

AI-Driven Delivery

• Operate AI agents and automated workflows for recurring compliance work.

• Review AI-generated outputs for accuracy, completeness and customer relevance.

• Identify opportunities to automate repetitive processes.

• Troubleshoot workflow issues and collaborate on improvements.

• Work with structured customer data, repositories and compliance platforms.

Customer Management

• Manage day-to-day compliance activities for assigned customers.

• Communicate progress, risks and outstanding requirements.

• Coordinate customer deliverables and timelines.

• Resolve routine issues independently and escalate complex matters.

• Maintain excellent customer communication and delivery quality.

What We're Looking For

Essential

• Approximately 2–4 years in GRC, cybersecurity consulting or a related field.

• Practical ISO 27001 and/or SOC 2 experience.

• Understanding of controls, risk assessments, evidence and audits.

• Experience preparing or reviewing compliance documentation.

• Strong writing, attention to detail and ability to manage multiple customers.

• Demonstrated professional use of ChatGPT, Claude or similar AI tools.

• Curiosity, technical confidence and adaptability.

Highly Desirable

• Hands-on experience with Vanta or a similar compliance automation platform.

• Familiarity with GitHub and version-controlled documentation.

• Understanding of APIs, integrations or MCP workflows.

• Experience with AI agents or workflow automation.

• ISO 42001 or AI governance exposure.

• Experience supporting customers through external certification audits.

• ISO 27001 Lead Implementer or Lead Auditor certification.

What Makes This Role Different

You are an AI-native GRC consultant, but you do not need to be a software engineer or build AI systems from scratch. Your value will come from judgment, problem-solving, customer engagement and ownership of outcomes, not the number of documents you manually produce.

What Success Looks Like in the First Three Months

• Learn Cyber Ally's methodology and AI workflows.

• Independently manage day-to-day activities for assigned customers.

• Produce accurate, audit-ready deliverables.

• Identify and resolve issues in AI-generated outputs.

• Deliver work that needs minimal senior review.

• Suggest practical delivery improvements.

Why Join Cyber Ally?

• Work at the intersection of cybersecurity, compliance and AI.

• Gain hands-on experience with emerging agentic technologies.

• Help shape a modern approach to GRC consulting.

• Work closely with experienced cybersecurity professionals.

• Own meaningful customer outcomes and develop AI-enabled delivery skills.

Location and How to Apply

• This is a hybrid role based in Sydney, with regular time in our Sydney office. Apply through LinkedIn Easy Apply.