Cyber Security GRC Consultant

Leidos LLC; North Canberra; On-site; AUD 90,000 - 150,000; Full time

Job summary

Leidos Australia seeks a Governance Risk and Compliance specialist to support GEO SPACES contracts in Canberra. You will lead IT security governance, risk management, and compliance across Defence ICT capabilities, ensuring alignment with security standards throughout the lifecycle.

Ideal candidates have NV2, willingness to uplift to TSPV/DISA, and ability to support security authorisation and assurance processes within regulated government environments.

Qualifications

• Proven experience in Governance, Risk and Compliance (GRC) within ICT or government environments.
• Strong understanding of security frameworks, risk management, and compliance practices.
• Experience supporting Security authorisation and assurance processes in regulated environments.

Responsibilities

• Provide IT Security leadership and oversight across key ICT capabilities.
• Develop and review IT Security governance and compliance documentation (SSP, SSP-Annex, SRMP, Essential 8).
• Ensure alignment with Defence security requirements and Authorisation to Operate frameworks.
• Conduct IT Security reviews and assurance activities for key ICT capabilities.
• Identify and manage Cyber Security risks, vulnerabilities, and compliance gaps.
• Provide guidance on IT security controls, governance frameworks, and compliance obligations.
• Support IRAP and embedded assessors undertaking assurance processes.
• Collaborate with technical teams to embed Cyber Security in design and delivery.
• Contribute to evidence generation to support Commonwealth acceptance and assurance.

Skills

GRC

Security frameworks

Risk management

Stakeholder engagement

Compliance

Tools

SSP

ISM

Job description

Governance Risk and Compliance specialist for GEO SPACES contract. Join Leidos & work on AGO GEO SPACES mission critical networks Multiple roles available including max term 4-6 months positions Minimum NV2 willing to uplift to TSPV + DISA, located in Canberra Due to the nature of the role, you must be an Australian Citizen who holds an active NV2 & be willing to uplift to TSPV security clearance; accompanied by the ability to be successful for a DISA/OSA.

The Opportunity

As a GRC Analyst, you will provide Cyber Security advice and oversight across the delivery and sustainment of Defence ICT capabilities, ensuring alignment with IT security standards, risk frameworks, and compliance requirements. You will work closely with the Security team, architects, engineers, and delivery teams to ensure Security principles and governance is embedded throughout the technology lifecycle—from design through to its transition to operations and throughout the capability’s sustainment.

Key Responsibilities

• Provide IT Security leadership and oversight across key ICT capabilities.
• Development and review of IT Security governance and compliance documentation including: System Security Plan (SSP), ISM Compliance Matrix (SSP-Annex), Security Risk Management Plan (SRMP), and Essential 8 Assessments.
• Ensure alignment with Defence security requirements and Authorisation to Operate frameworks.
• Conduct and support IT Security reviews and assurance activities of key ICT capabilities.
• Identify, assess, and manage Cyber Security risks, vulnerabilities, and compliance gaps.
• Provide guidance on IT security controls, governance frameworks, and compliance obligations.
• Support IRAP and embedded assessors undertaking any assurance processes.
• Collaborate with technical teams to ensure Cyber Security compliance is integrated into solution design and delivery.
• Contribute to evidence generation to support Commonwealth acceptance and assurance activities.

What You’ll Bring to Make an Impact

We are looking for someone who brings judgement, curiosity, and a collaborative approach to work that matters.

Essential for this role

• Proven experience in Governance, Risk and Compliance (GRC) within ICT or government environments.
• Strong understanding of security frameworks, risk management, and compliance practices.
• Experience supporting Security authorisation and assurance processes in regulated environments.
• Ability to review and interpret technical designs from a Security governance and risk perspective.
• Strong stakeholder engagement skills, with ability to communicate risk, compliance, and assurance concepts.
• Experience working across multidisciplinary delivery teams.

Advantageous, but not essential

• Experience within Defence or national security environments.
• Exposure to secure ICT systems, networks, or geospatial capabilities.
• Familiarity with security control frameworks and audit processes.
• Experience supporting system integration and delivery in government environments.

About the Team

Our GEOSPACES team is instrumental in developing and maintaining innovative technologies that tackle evolving challenges within the intelligence community. Additionally, these roles will focus on designing, integrating, and validating complex tenant environments tailored to specific use cases, supporting critical customer objectives.

About Leidos Australia

At Leidos Australia, our work goes beyond a job title. We design, build, operate and support the systems, services and capabilities that help protect and advance the Australian way of life. Backed by a global organisation of more than 40,000 people, our Australian team of around 2,000 has partnered with government, defence and national security customers for more than 30 years. We deliver mission-critical solutions where reliability, trust and purpose matter. Leidos is a destination for people who want their work to have purpose, their contribution to be recognised, and their career to grow without needing to fit a single mould. Meaningful work is supported by benefits, flexibility and career pathways that help you grow while balancing life outside work. This includes:

• Flex Your Way – Tailor work to your life with options including Life Days (up to 12 extra days off per year), part‑time arrangements, job sharing, and compressed hours.
• Wellbeing That Matters – Free access to Headspace and MeQuilibrium, plus dedicated wellness spaces to support your mental, physical, and emotional wellbeing.
• Learn Without Limits – Access over 120,000 on-demand courses, alongside technical, project management, leadership, and professional development opportunities.
• Work That Makes an Impact – Contribute to nationally significant projects that matter, solve complex challenges, and accelerate your career through unique growth opportunities.
• Build Your Future – Whether you're deepening technical expertise or preparing for leadership, we'll invest in your development every step of the way.
• And Much More – These are just a few of the ways we invest in our people and help them thrive.

Original Posting

Original Posting: For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range: The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Pay and Benefits Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available here.

Securing Your Data Leidos will never ask you to provide payment-related information at any part of the employment application process. And Leidos will communicate with you only through emails that are sent from a Leidos.com email address. If you receive an email purporting to be from Leidos that asks for payment-related information or any other personal information, please report the email to [e-mail].

Commitment and Diversity All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.