Leading a new offensive security capability within the Cyber Resilience practice is the core of this role, shaping an AI-enabled delivery model to scale globally. This unique opportunity suits a commercially minded and forward-thinking Director who understands how AI, automation, tooling, and partner ecosystems are disrupting cyber-attacks and offensive security delivery models. You will translate this disruption into better client outcomes and a compelling growth opportunity for the firm, helping clients understand, validate, and reduce their cyber risk profile.
Responsibilities
Build and lead the offensive security practice: Establish the strategy, service offerings, operating model, methods, quality standards, and growth plan for a market-relevant offensive security team that delivers both point-in-time assurance and managed offensive security services
Scale through technology and partners: Develop an AI-enabled and partner-led delivery model that improves speed, quality, consistency, and reach, while maintaining strong governance, assurance, and client trust
Lead go-to-market activity: Shape propositions, campaigns, client conversations, and commercial models that respond to local market needs while leveraging global Grant Thornton capability
Deliver trusted client outcomes: Lead senior client relationships, translate technical findings into executive-level risk insight, and ensure offensive security work drives practical remediation and measurable resilience improvement
Modernise offensive security delivery: Identify how AI, automation, attack simulation, testing orchestration, and continuous validation can evolve point-in-time testing into scalable, intelligence-led assurance
Grow vulnerability and exposure management services: Extend offensive security services into vulnerability management and Continuous Threat Exposure Management, helping clients identify attack surfaces, prioritise exploitable exposures, validate business impact, and mobilise remediation through both targeted point-in-time assessments and ongoing managed exposure management services
Lead people and capability: Recruit, develop, coach, and retain a high-performing team, creating a culture that values curiosity, technical excellence, collaboration, commercial discipline, and responsible innovation
Collaborate across the firm: Work with cyber resilience, technology risk, incident response, managed security, global delivery teams, and alliance partners to create integrated solutions for clients
Requirements
Senior offensive security experience: Significant experience in offensive security, penetration testing, red teaming, adversary simulation, security assurance, or cyber consulting, including experience leading complex client engagements
Customer-facing consulting and sales capability: Proven ability to build trusted client relationships, originate and shape opportunities, develop proposals, lead pursuits, manage commercial outcomes, and deliver high-quality client work
Millions of jobs, with real people getting hired every day
200,000+
New jobs added daily
7,000,000+
Verified job listings
1,000,000+
Tailored applications submitted
Strategic and commercial mindset: Ability to see where the market is heading, understand client demand, assess delivery economics, and build offerings that are differentiated, scalable, and commercially sustainable
Technical credibility: Strong understanding of offensive security methods across application, infrastructure, cloud, identity, network, endpoint, and emerging technology environments, with the judgement to know when to bring specialist expertise into the conversation
AI and automation fluency: Practical understanding of how AI, automation, agentic workflows, and modern tooling are changing cyber-attack techniques and offensive security delivery, including the risks, controls, and opportunities this creates for clients
Vulnerability and exposure management expertise: Strong understanding of vulnerability management, attack surface management, exposure prioritisation, exploitability validation, and remediation mobilisation, including how CTEM programs bring together people, process, platforms, and evidence-based risk reduction
Relevant technology awareness: Familiarity with platforms such as Qualys, Tenable, Horizon3.ai, Rapid7, Microsoft Defender Vulnerability Management, CrowdStrike Falcon Exposure Management, Wiz, Orca Security, XM Cyber, Cymulate, Pentera, and Nucleus Security would be advantageous; the emphasis is on using technology to improve prioritisation, validation, and measurable risk reduction rather than on any single toolset
Market and regulatory awareness: Strong awareness of the Australian cyber market, buyer expectations, procurement drivers, and relevant standards, including APRA CPS 234, the Australian Government Information Security Manual, Essential Eight, ISO 27001, PCI DSS, and privacy obligations where relevant
Leadership and people skills: Demonstrated ability to lead technical and consulting teams, develop talent, set clear expectations, manage quality, and create an inclusive, high-performing team culture
Global collaboration: Experience working with global teams, delivery centres, alliance partners, or specialist providers to deliver consistent client outcomes across markets
Benefits
9-day fortnight with no salary reduction
Flexible working options available
Fully funded gym membership
Mental health support, financial, and wellbeing coaching
Relevant Qualifications And Credentials
CREST credentials: CREST Practitioner Security Analyst, CREST Registered Penetration Tester, and/or CREST Certified Tester credentials are highly relevant for the Australian market; CREST Certified Red Team Specialist or Manager credentials would be advantageous for senior red team leadership
Offensive security qualifications: OSCP, OSCE3, OSEP, OSWE, CRTO, GIAC GPEN, or equivalent practical offensive security certifications are desirable and demonstrate applied technical depth
Security leadership qualifications: CISSP, CISM, CCSP, SABSA, TOGAF, or similar credentials are useful for senior client engagement, security leadership, and architecture-oriented conversations
Cloud and platform certifications: Relevant cloud security qualifications across Microsoft Azure, AWS, or Google Cloud are advantageous, particularly where offensive security services include cloud, identity, application, and infrastructure testing
Australian market requirements: Experience working to recognised testing methodologies, rules of engagement, ethical standards, secure handling of client data, and Australian regulatory expectations is essential; exposure to government or critical infrastructure assurance requirements would be advantageous
About the Company
Grant Thornton Australia is one of Australia’s leading professional services firms, providing audit, tax, and advisory services to a diverse range of clients. It supports the careers of more than 1,500 people across six Australian offices and a global network spanning more than 150 markets.
