Cyber Security GRC Analyst — Canberra (On‑Site)

Interpro; Canberra; On-site; AUD 120,000 - 180,000; Full time

Job summary

Interpro in Canberra, ACT is seeking a Cyber Security GRC Consultant to support large-scale cyber resilience initiatives in a highly regulated environment. You will work with business, technology, and security stakeholders to embed security requirements across project delivery and operations.

You will develop governance, risk and compliance artefacts, review security controls, and coordinate assurance activities such as audits and penetration testing, while engaging with stakeholders to ensure

Qualifications

• Strong knowledge of ISM (Australian Government Information Security Manual).
• Experience performing GRC in complex enterprise environments.
• Ability to develop and maintain security governance documentation.
• Experience supporting security assurance activities (audits, assessments, pentesting, reviews).
• Excellent written and verbal communication, and ability to engage across technical and non-technical audiences.

Responsibilities

• Contribute to solution and architecture design by providing cyber security guidance and risk-based recommendations.
• Review, analyse, and define security requirements aligned with government security frameworks.
• Develop high-quality security documentation, reports, and executive briefings.
• Coordinate and support security assurance activities, including security assessments, audits, and penetration testing.
• Lead the creation and maintenance of GRC artefacts, policies, procedures, and security documentation.
• Engage with stakeholders to drive security outcomes and ensure compliance obligations are met.
• Support risk management activities including risk identification, assessment, treatment, and reporting.
• Provide cyber security expertise during critical operational periods and program milestones.

Skills

GRC governance

Security risk & compliance

Stakeholder management

Job description

Interpro in Canberra, ACT is seeking a Cyber Security GRC Consultant to support large-scale cyber resilience initiatives in a highly regulated environment. You will work with business, technology, and security stakeholders to embed security requirements across project delivery and operations.

You will develop governance, risk and compliance artefacts, review security controls, and coordinate assurance activities such as audits and penetration testing, while engaging with stakeholders to ensure