Cyber GRC Advisor — Risk & Compliance Lead (Baseline Clearance)

Clicks IT Recruitment; City of Melbourne; On-site; AUD 165,000 - 220,000; Full time

Job summary

Clicks IT Recruitment is seeking experienced Cyber Security Advisers to lead governance, risk and compliance activities across government-focussed programs. You will work with the Cyber Operations branch and program stakeholders to ensure digital services are secure, reliable and accessible.

The role requires demonstrable SRA/SIA experience, knowledge of ISO27001, NIST, ISM and PSPF, and active Baseline clearance. Based in VIC/NSW/ACT/QLD with 12-month contract and extension options.

Qualifications

• Experience conducting Security Risk Assessments (SRAs) and Security Impact Assessments (SIAs).
• Knowledge of information security principles, risk management frameworks, and governance practices.
• Knowledge of ISO 27001, NIST CSF, ISM and PSPF.
• Experience supporting security authorisation and accreditation processes.
• Ability to review security assurance reports including IRAP, penetration testing, SOC 1 and SOC 2.

Responsibilities

• Conduct Security Risk Assessments (SRAs) for new and existing systems.
• Assess threats, vulnerabilities and FOCI risks.
• Develop risk treatment strategies and security control baselines.
• Perform SIAs to determine appropriate security assessment pathways.
• Review IRAP, penetration testing, SOC 1/SOC 2 reports.
• Evaluate SRAs and SRMPs.
• Support security authorisation and ongoing compliance activities.
• Issue and reassess Security Approval to Operate (SATO) outcomes.
• Prepare reports and briefings for executive audiences.

Skills

SRA & SIA

InfoSec

ISO 27001

NIST CSF

IRAP/SOC reports

Security authorisation

AI risk

Mainframe security

Cloud security

Tools

IRAP tooling

Cloud platforms

Job description

Clicks IT Recruitment is seeking experienced Cyber Security Advisers to lead governance, risk and compliance activities across government-focussed programs. You will work with the Cyber Operations branch and program stakeholders to ensure digital services are secure, reliable and accessible.

The role requires demonstrable SRA/SIA experience, knowledge of ISO27001, NIST, ISM and PSPF, and active Baseline clearance. Based in VIC/NSW/ACT/QLD with 12-month contract and extension options.