Cyber GRC Specialist

CEA Technologies; Canberra; On-site; AUD 110,000 - 150,000; Full time

Benefits offered by this job

Six weeks annual leave

Superannuation 14%

Free car parking

Paid parental leave

Employee wellbeing programs

Health insurance for defence

Job summary

CEA Technologies in Canberra is seeking a Cyber GRC Specialist to support the implementation, monitoring, and continuous improvement of security controls in line with Australian Government standards. You will embed governance, risk, and regulatory compliance practices across ISM, PSPF, and ASD Essential 8.

The role covers authorisation documentation, risk assessments, and advisory support to secure stakeholders’ approval, with focus on continuous security posture improvements across enterprise

Qualifications

• 3+ years working as a Cyber Security or GRC Analyst.
• Knowledge of PSPF, ISM, ASD Essential 8, NIST.
• Experience in enterprise security and regulated environments such as federal government, telco or energy.

Responsibilities

• Develop, deliver and maintain security authorisation documentation to support government processes.
• Implement security standards including ISM, ASD Essential 8, NIST.
• Provide cyber security advice to monitor infrastructure and identify improvements.

Skills

Cyber security

GRC

Risk assessment

Regulatory compliance

Job description

CEA is an Australian Commonwealth company that designs, develops, manufactures and sustains advanced active phased array radar systems. The company’s design principles and commitment to investment in research and development ensures innovative thinking, technological skill, and quality fabrication.

Our programs include the ANZAC and Hunter Class frigates and air defence applications for Army and Air Force, and Range applications. Through our longstanding and ongoing collaboration with Defence, CEA Technologies has undertaken research and development into all aspects of active electronically scanned array technologies. This has resulted in the creation of a highly-modular and scalable product suite, which have become integral to a wide range of critical Defence capabilities.

The Position

Working under the Cyber GRC Manager and as part of the broader cybersecurity team, this role supports the implementation, monitoring, and continuous improvement of security controls to ensure compliance, maturity uplift, and informed risk management is in line with organisational objectives and Government standards.

The Cyber GRC Specialist supports the organisations information system authorisation activities by embedding governance, risk, and regulatory compliance practices that are aligned to Australian Government frameworks – particularly the Information Security Manual (ISM), Protective Security Policy Framework (PSPF), and ASD Essential 8.

Key Responsibilities:

Develop, deliver and maintain security authorisation documentation (e.g., System Security Plans, Security Risk Management Plans, and Cyber Incident Response Plans) to support Government ATO processes.

Implement security standards, ISM, ASD Essential 8, NIST, etc.

Provide cyber security advice that assists with the monitoring of infrastructure components, the design of infrastructure, identify areas for improvements and assist with the implementation of upgrades, or enhancements as required.

Conduct cyber security risk assessments to identify and evaluate potential threats and vulnerabilities.

Provide SME recommendations and advice on compliance and regulatory requirements to support continuous improvement of cyber security posture.

Assist with the development of comprehensive security policies to address and mitigate risks

Six weeks of paid annual leave per year

Superannuation of 14.0%

Free car parking

Paid parental, compassionate, defence reserve & voluntary emergency services leave

Employee assistance and wellbeing programs

Health insurance for defence supporters and their families

Salary packaging for novated leasing

Opportunities for professional growth and development

Our Ideal Candidate:

Minimum 3 years working as a Cyber Security or GRC Analyst.

Knowledge of security standards and frameworks such as PSPF, ISM, ASD Essential 8, NIST.

Ability to identify risks, provide risk reduction strategies, and collaborate with business teams to secure stakeholders’ approval and support.

Experience working within an enterprise security environment.

Previously worked in heavily regulated environments such as federal government, telco, energy, etc.

Eligible to obtain and maintain an AGSVA clearance – Top Secret Positive Vetting

ITAR - This position requires employees to access equipment and data that is subject to U.S International Traffic and Arms Regulation (ITAR). As such, applicants must disclose the following information at the time of application.

Place of Birth

Countries of current or past citizenship (including any dual citizenship or nationality) and residence,

Countries of issue for current and past passports and

Other information related to their nationality for security and ITAR compliance purposes.

To find out more about our Citizenship and Nationality requirements, please visit www.cea.com.au

How to apply

Click on the 'Apply Now' button below. Please include a current copy of your resume and complete the screening questions. Applications without these elements will not be considered.

CEA encourages the submissions of early applications as we may review, short-list and/or conduct interviews for this role prior to the closing date.

Diversity, Equality and Inclusion at CEA

CEA is committed to fostering a diverse, equitable and inclusive environment. As an Equal Opportunity Employer, we strive to create a culture where all employees are respected and empowered to contribute positively to our organisation, regardless of their cultural background, age, gender identity, neurodiversity, disability, family and carer commitments, religion or sexuality. We welcome applications from veterans, those returning from a career break, people with disabilities and those who identify as Aboriginal and Torres Strait Islander.

For information on Equal Employment Opportunity & Privacy or Security & Citizenship requirements please visit www.cea.com.au/opportunities-at-cea

Should you require any adjustments throughout the recruitment process, please let us know. You can also email ***********@cea.com.au for a confidential discussion.

Unsolicited resumes from recruitment agencies will not be accepted

Be careful - Don’t provide your bank or credit card details when applying for jobs. Don't transfer any money or complete suspicious online surveys. If you see something suspicious, report this job ad .