Cyber GRC Manager

HorizonOne Recruitment; Canberra; On-site; AUD 140,000 - 200,000; Full time

Benefits offered by this job

Six weeks paid annual leave

Superannuation 14.0%

Free onsite car parking

Parental leave

Defence health insurance

Job summary

HorizonOne Recruitment has partnered with a leading Australian defence technology organisation to appoint a Cyber GRC Manager in Canberra. You will lead information system authorisation activities and strengthen governance, risk and regulatory compliance across the business, aligning to the PSPF, ISM and ASD Essential Eight.

Working with CISO, DCISO and technical teams, you will translate complex security risk into practical recommendations for executives and help advance security maturity,

Qualifications

• Significant experience in cybersecurity, GRC or information security within a complex enterprise.
• Experience in Defence, Federal Government, telecommunications, energy or another regulated sector.
• Minimum 5–7 years’ experience as a Cyber Security or GRC Analyst.

Responsibilities

• Lead information system authorisation activities across the organisation.
• Develop and maintain SSPs, SRMPs and incident response plans.
• Drive ISM, Essential Eight and related frameworks.
• Lead cyber risk assessments across systems and projects.
• Advise on security for greenfield and legacy modernisation initiatives.
• Develop policies and controls to manage cyber risks.
• Partner with technical and business teams to improve security maturity.
• Support the CISO and DCISO with executive-level security advice.

Skills

Cyber security

GRC

Stakeholder comms

Regulatory knowledge

Job description

The Opportunity

Our client is a highly regarded Australian defence technology organisation that designs, develops and sustains advanced systems that support some of Australia’s most critical Defence capabilities.

Through longstanding collaboration with Defence, the organisation has developed expertise in active electronically scanned array technologies, resulting in a highly modular and scalable product suite integral to critical Defence capabilities.

This role leads the organisation’s information system authorisation activities, embedding governance, risk and regulatory compliance practices aligned to Australian Government frameworks including the ISM, PSPF and ASD Essential 8.

Working within the broader cybersecurity team, you’ll lead the implementation, monitoring and continuous improvement of security controls that support compliance, maturity uplift and informed risk management.

The Role

As Cyber GRC Manager, you will lead information system authorisation activities and strengthen governance, risk and regulatory compliance practices across the organisation.

You will work closely with the CISO, DCISO, technical teams and business stakeholders to implement and continuously improve security controls aligned with Australian Government requirements, including the ISM, PSPF and ASD Essential Eight.

You will provide trusted security advice across infrastructure, enterprise applications and technology projects, translating technical risk into practical recommendations for stakeholders and senior executives.

Your responsibilities will include:

• Leading security authorisation and Government ATO activities
• Developing and maintaining SSPs, SRMPs and incident response plans
• Driving implementation of ISM, Essential Eight and related frameworks
• Leading cyber risk assessments across systems and projects
• Advising on security for greenfield and legacy modernisation initiatives
• Developing policies and controls to manage identified cyber risks.
• Partnering with technical and business teams to improve security maturity
• Supporting the CISO and DCISO with executive-level security advice

The Ideal Person

You will bring significant experience in cybersecurity, GRC or information security within a complex enterprise environment.

Experience in Defence, Federal Government, telecommunications, energy or another highly regulated sector would be particularly valuable.

You will have a minimum of five to seven years’ experience as a Cyber Security or GRC Analyst.

You will have strong working knowledge of Australian Government security frameworks, including the PSPF, ISM and ASD Essential Eight, combined with the ability to identify cyber risks and develop practical risk-reduction strategies.

You will be comfortable working with stakeholders ranging from deeply technical specialists through to senior executives and will be able to communicate complex security issues in a clear, commercially relevant way.

Salary / Rates

• Remuneration will be aligned with experience
• Permanent, full-time position
• Based on site in Canberra

You will also have access to the following additional benefits:

• Six weeks of paid annual leave per year
• Superannuation of 14.0%
• Free onsite car parking
• Paid Parental, Compassionate, Defence Reserve and Voluntary Emergency Services leave
• Defence Health Insurance and salary packaging options
• Employee Assistance Program and support for ongoing professional growth and development

HorizonOne is committed to building a diverse and inclusive workforce and we encourage applications from people of all cultures, capabilities and backgrounds.