Cyber Security GRC Analyst

Interpro; Canberra; On-site; AUD 120,000 - 180,000; Full time

Job summary

Interpro in Canberra, ACT is seeking a Cyber Security GRC Consultant to support large-scale cyber resilience initiatives in a highly regulated environment. You will work with business, technology, and security stakeholders to embed security requirements across project delivery and operations.

You will develop governance, risk and compliance artefacts, review security controls, and coordinate assurance activities such as audits and penetration testing, while engaging with stakeholders to ensure

Qualifications

• Strong knowledge of ISM (Australian Government Information Security Manual).
• Experience performing GRC in complex enterprise environments.
• Ability to develop and maintain security governance documentation.
• Experience supporting security assurance activities (audits, assessments, pentesting, reviews).
• Excellent written and verbal communication, and ability to engage across technical and non-technical audiences.

Responsibilities

• Contribute to solution and architecture design by providing cyber security guidance and risk-based recommendations.
• Review, analyse, and define security requirements aligned with government security frameworks.
• Develop high-quality security documentation, reports, and executive briefings.
• Coordinate and support security assurance activities, including security assessments, audits, and penetration testing.
• Lead the creation and maintenance of GRC artefacts, policies, procedures, and security documentation.
• Engage with stakeholders to drive security outcomes and ensure compliance obligations are met.
• Support risk management activities including risk identification, assessment, treatment, and reporting.
• Provide cyber security expertise during critical operational periods and program milestones.

Skills

GRC governance

Security risk & compliance

Stakeholder management

Job description

• Contract Length:12‑month initial contract, with further 12‑month extensions available
• Security Clearance:Must be an Australian Citizen and hold a minimum NV1 security clearance
• Location:Canberra, ACT based role with on-site requirement

What You Will Do

As a Cyber Security GRC Consultant, you will play a key role in supporting large-scale cyber resilience and security uplift initiatives within a highly regulated environment. You will work closely with business, technology, and security stakeholders to ensure security requirements are embedded throughout project delivery and operational activities.

Your responsibilities will include

• Contribute to solution and architecture design by providing cyber security guidance and risk-based recommendations.
• Review, analyse, and define security requirements aligned with industry and government security frameworks.
• Develop high-quality security documentation, reports, and executive briefings to support informed decision-making.
• Coordinate and support security assurance activities, including security assessments, audits, penetration testing, and independent assurance reviews.
• Lead the creation and maintenance of governance, risk, and compliance (GRC) artefacts, policies, procedures, and security documentation.
• Engage with stakeholders across business and technical teams to drive security outcomes and ensure compliance obligations are met.
• Support risk management activities, including security risk identification, assessment, treatment, and reporting.
• Provide cyber security expertise during critical operational periods and program delivery milestones.

You Should Have

• Strong knowledge of the Australian Government Information Security Manual (ISM), Protective Security Policy Framework (PSPF), and Essential Eight.
• Demonstrated experience performing Cyber Security Governance, Risk & Compliance (GRC) functions within complex enterprise environments.
• Proven ability to develop, review, and maintain security governance and compliance documentation.
• Experience supporting security assurance activities, including audits, assessments, penetration testing, and compliance reviews.
• Strong stakeholder management skills with the ability to engage effectively across technical and non-technical audiences.
• Experience preparing executive-level communications, presentations, and security reporting.
• Excellent written and verbal communication skills.
• Ability to work independently while collaborating effectively within multidisciplinary teams.

Nice to Have

• 5+ years of experience in Cyber Security, Governance, Risk & Compliance, or related security disciplines.
• Experience working within highly regulated industries or government environments.
• Familiarity with security accreditation, assurance, and risk management frameworks.
• Exposure to cyber resilience, security transformation, or uplift programs.
• Relevant certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor, or equivalent.
• Understanding of security architecture principles and secure-by-design methodologies.
• Experience coordinating multiple stakeholders and managing competing priorities across large programs.

The role closes on 27/08/2026 before 05:00 pm.