Cyber GRC Manager (PSTV Cleared)

Sirius.; Canberra; On-site; AUD 120,000 - 160,000; Full time

Job summary

Sirius. is seeking a Cyber GRC Manager in Canberra to lead governance, risk and compliance efforts in a crucial role. This permanent, on-site position requires strong knowledge of security frameworks and experience managing GRC functions. You will have the opportunity to influence key initiatives and grow a team of GRC Analysts.

The ideal candidate will possess AGSVA clearance, at least 7 years of proven experience in cyber security/GRC, and be skilled in stakeholder management. This is a unique chance to make an impact in a dynamic environment.

Qualifications

• Experienced in cyber security with 7+ years in GRC-focused roles.
• Eligible for AGSVA Positive Vetting clearance.
• Proven stakeholder management in regulated environments.

Responsibilities

• Lead security authorisation documentation for ATO.
• Implement frameworks/standards and drive uplift.
• Conduct cyber security risk assessments and manage treatments.
• Act as a trusted SME for stakeholders.
• Integrate security in IT projects and infrastructure.

Skills

Cyber security / GRC experience

Stakeholder management

Knowledge of PSPF

Knowledge of ISM

Knowledge of NIST

Education

Australian Citizenship and eligibility for PV clearance

AGSVA Positive Vetting clearance (current or recent)

Tools

ISO 27000 series

NIST 800 series

CIS controls

Job description

Cyber GRC Manager (PV Cleared) — Canberra (On-site 5 days per week) | Permanent

Want to lead Authority to Operate (ATO) outcomes and lift cyber maturity in an environment where security actually matters? Would you like to grow a team of 4 GRC Analysts to 7 and be part of a growing workplace?

We are partnering with a highly regarded organisation in the Government & Defence sector to recruit a Cyber GRC Manager in Canberra. This is a permanent, on-site role working closely with senior cyber leadership, driving governance, risk, compliance and security authorisation across complex systems.

Why you’ll want this role

• High-impact work: Own and lead security authorisation activities supporting Government ATO processes.
• Leadership & influence: Report into senior cyber leadership and guide a dedicated GRC function (direct report included).
• Maturity uplift focus: Drive implementation and continuous improvement aligned to Government security frameworks.
• Variety: Influence greenfield initiatives and modernisation of legacy systems.
• Growth: Strong emphasis on mentoring and self-directed learning in a small, capable cyber team.
• Permanent opportunity: Long-term stability in a highly regulated environment.

Role (what you’ll be doing)

• Owning security authorisation documentation (e.g., System Security Plans, Security Risk Management Plans, Cyber Incident Response Plans) for ATO.
• Leading implementation and uplift across frameworks/standards such as ISM, PSPF, ASD Essential Eight, NIST (and similar).
• Running and leading cyber security risk assessments, with pragmatic risk treatment strategies.
• Acting as a trusted SME across stakeholders with varying technical depth, including executive-level briefings.
• Partnering with IT and delivery teams to embed security into infrastructure, projects, and enterprise applications.

What you’ll bring

• Australian Citizenship (and eligible to maintain PV clearance requirements)
• AGSVA Positive Vetting clearance (Current, active or recently deactivated within the past 2 months)
• Strong experience in cyber security / GRC (typically 7+ years in cyber/GRC-focused roles)
• Solid working knowledge of PSPF, ISM, ASD Essential Eight (and/or NIST)
• Proven stakeholder management across a complex, regulated environment

Nice-to-haves

• Exposure to ISO 27000 series, NIST 800 series, CIS controls, etc.

If you are a passionate experienced GRC Analyst looking to be a leader or an experienced GRC Manager, we encourage you to apply today via the link provided!

Please note Canberra-based candidates with full time work rights or people already willing to relocate only will be considered for this role as it is a requirement for this position and no sponsorship is on offer.

Candidates from all backgrounds are welcome to apply too. Please feel free to also send a CV to [e-mail], our Principal IT Consultant for Data, AI and Cyber, thanks.