Cyber GRC Lead - National Security, Canberra (Active TSPV)

Client 1; Canberra; On-site; AUD 150,000 - 210,000; Full time

Benefits offered by this job

Defence projects

Secure environments

Career growth

Industry leaders

Job stability

Job summary

Client 1, a leading Australian technology organisation delivering capabilities to Defence and Government customers, seeks a GRC Lead to drive governance, risk and compliance across a complex tech environment in Canberra.

Reporting to cyber security leadership, you will manage A&A processes, develop policies, and engage with stakeholders to strengthen the organisation's cyber posture while ensuring accreditation and regulatory obligations are met.

Qualifications

• Proven experience in cyber governance, risk and compliance.
• Knowledge of Assessment and Authorisation frameworks and methodologies.
• Experience in developing security documentation and accreditation artefacts.
• Familiarity with the DSPF and ISM/Essential Eight controls.
• Ability to engage with Defence and government stakeholders.

Responsibilities

• Lead cyber governance, risk and compliance activities.
• Drive cyber security risk assessment and risk treatment.
• Manage Assessment and Authorisation (A&A) processes.
• Develop and maintain cyber security policies and procedures.
• Support accreditation activities for internal and external stakeholders.
• Collaborate with technology, operations and security teams to improve outcomes.
• Contribute to security architectures and controls implementations.
• Maintain cyber risk registers and provide governance reporting.
• Engage with government agencies, Defence bodies and vendors as required.

Skills

GRC fundamentals

Assessment & Authorisation

Policies & risk docs

DSPF knowledge

ISM/Essential Eight

Stakeholder engagement

MITRE ATT&CK familiarity

Defence environment experience

Education

CISSP

CISM

CRISC

ISO 27001 Lead Implementer/Auditor

Other cyber security certs

Job description

Client 1, a leading Australian technology organisation delivering capabilities to Defence and Government customers, seeks a GRC Lead to drive governance, risk and compliance across a complex tech environment in Canberra.

Reporting to cyber security leadership, you will manage A&A processes, develop policies, and engage with stakeholders to strengthen the organisation's cyber posture while ensuring accreditation and regulatory obligations are met.