Cyber GRC Specialist — Gov Security & Compliance Lead

Cleared Recruitment; Canberra; On-site; AUD 110,000 - 150,000; Full time

Benefits offered by this job

14% superannuation

6 weeks annual leave

Mentoring and development

Career growth

Govt frameworks exposure

Job summary

Cleared Recruitment is seeking a Cyber GRC Specialist to join our Security team in Canberra. You will embed governance, risk and compliance practices aligned to Australian Government frameworks such as ISM, PSPF and ASD Essential Eight.

You will work with the Cyber GRC Manager on security authorisation, documentation and risk management while supporting accreditation to operate and continuous cyber maturity uplift.

Qualifications

• Minimum three years' experience as a Cyber Security Analyst or GRC Analyst.
• Strong knowledge of PSPF, ISM, ASD Essential Eight and NIST frameworks.
• Experience in cyber security risk assessments and risk mitigation.

Responsibilities

• Develop, deliver and maintain security authorisation documentation (SSP, SRMP, CRP).
• Support ATO processes for government accreditation.
• Assessment and Authorisation activities; implement security standards.
• Provide cyber security advice to infrastructure monitoring and design improvements.
• Collaborate with stakeholders to improve risk management outcomes.
• Support continuous governance, risk and compliance initiatives.

Skills

GRC analyst

Risk assessments

Information security frameworks

Stakeholder engagement

Written communication

Cyber security governance

ISMS/PSPF knowledge

NIST familiarity

ASD Essential Eight

Security documentation

Education

Cyber security related qualifications

Desirable: ISO 27000 / NIST / CIS knowledge

Job description

Cleared Recruitment is seeking a Cyber GRC Specialist to join our Security team in Canberra. You will embed governance, risk and compliance practices aligned to Australian Government frameworks such as ISM, PSPF and ASD Essential Eight.

You will work with the Cyber GRC Manager on security authorisation, documentation and risk management while supporting accreditation to operate and continuous cyber maturity uplift.