Cyber Security GRC Specialist

Laneway Talent; Canberra; On-site; AUD 90,000 - 130,000; Full time

Job summary

Laneway Talent is recruiting for an experienced Cyber Security GRC Specialist to support a major cyber security resilience uplift program in Canberra.

The role focuses on governance, risk and compliance activities, security assurance, documentation and stakeholder engagement within a complex environment. The successful candidate will work with cyber security teams and senior decision-makers.

Qualifications

• Demonstrated experience in cyber security GRC roles.
• Strong knowledge of ISM and PSPF.
• Experience with the Essential Eight controls and security frameworks.
• Experience developing formal cyber security and GRC documentation.
• Experience supporting security assurance activities, including IRAP and penetration testing.
• Proven stakeholder management and ability to communicate complex topics clearly.

Responsibilities

• Contribute to cyber security GRC activities across governance, risk and compliance.
• Review security requirements and provide practical recommendations.
• Develop security advice, communications and documentation for senior executives.
• Coordinate security assurance activities, including IRAP and penetration testing.
• Develop and maintain formal cyber security documentation.
• Support governance, risk and compliance across the cyber security environment.
• Engage stakeholders to identify and address security risks and requirements.
• Provide clear cyber security guidance to support program outcomes.
• Support security activities during key delivery periods and operations.

Skills

GRC experience

ISM knowledge

PSPF knowledge

Essential Eight knowledge

IRAP & pen testing experience

Documentation drafting

Stakeholder management

Clear communication

Job description

Laneway is recruiting on behalf of our client for an experienced Cyber Security GRC Specialist to support a major cyber security resilience uplift program.

This is a Canberra-based opportunity focused on cyber security governance, risk and compliance activities, security assurance, documentation and stakeholder engagement within a complex environment.

The Role

You will contribute to a range of cyber security GRC activities, working closely with cyber security teams, technical stakeholders and senior decision-makers.

Key responsibilities include:

• Contributing to solution design with a focus on cyber security considerations
• Reviewing and providing recommendations on security requirements
• Developing security advice, communications and documentation to support senior executive decision-making
• Supporting the coordination of security assurance activities, including IRAP and penetration testing
• Developing and maintaining formal cyber security documentation
• Supporting governance, risk and compliance activities across the cyber security environment
• Working with stakeholders to identify and address security risks and requirements
• Providing practical cyber security advice to support program and project outcomes
• Supporting security activities during key delivery periods and operational requirements

About You

You’ll ideally have:

• Demonstrated experience working in a cyber security GRC role
• Strong knowledge of the Information Security Manual (ISM)
• Understanding of the Protective Security Policy Framework (PSPF)
• Strong knowledge of the Essential Eight
• Experience developing formal cyber security and GRC documentation
• Experience supporting security assurance activities, including IRAP and penetration testing
• Strong stakeholder and client management skills
• Ability to communicate complex security matters clearly to technical and non-technical audiencesExperience preparing documentation and advice for senior stakeholders
• Strong written communication and attention to detail
• Ability to work collaboratively across technical, security and business teams

The Opportunity

• 45 hours per week
• Full-time onsite
• Temporary work-from-home arrangements may be considered on a case-by-case basis
• NV1 security clearance required — active or inactive clearance will be considered

The role will support key delivery periods, with flexibility required to work extended hours and weekends where needed to meet client requirements.

The initial engagement is aligned to the delivery program, with the potential for extension depending on ongoing client requirements and future program needs.

Candidate applications will require a one-page pitch addressing the selection criteria.

We value diverse perspectives, backgrounds, and experiences, and encourage applications from people of all identities, communities, and career journeys.