Defence Cyber GRC Specialist

c4isolutions; Sydney; On-site; AUD 140,000 - 200,000; Full time

Benefits offered by this job

Long Service Leave

Health & wellbeing allowance

First year leave

Birthday leave

Higher Education Subsidy

Veteran Career Development

Service Awards

Employee Recognition

Charity Matching

Job summary

C4i Solutions in Sydney is seeking a Cyber Security GRC specialist to support secure and compliant outcomes across Defence programs. You will drive governance, risk assessment, and regulatory alignment with ISM, PSPF, DSPF, and NIST, delivering risk-based advice and accreditation support.

The role focuses on developing security artefacts, leading CSAAF processes to obtain ATO, and embedding governance practices to strengthen cyber maturity while coordinating with Defence stakeholders in a

Qualifications

• Australian citizen with min AGSVA NV1 clearance (upgrade to NV2).
• Bachelor's degree in Cyber Security, Information Technology, or related field (or equivalent experience).
• CISSP, CISM or ISO27001-Lead Auditor, SANS 401 certification.
• IRAP qualified (highly regarded).
• Min of 5 years' experience in a Defence classified ICT environment.
• Willingness to work on-call roster periodically.
• Strong analytical and reporting skills.
• Excellent communication and stakeholder engagement in high-pressure, secure ICT environments.

Responsibilities

• Manage cyber security governance and compliance frameworks (ISM, PSPF, DSPF, E8) within the Defence CyberWorthiness System (DCwS).
• Lead CSAAF processes to achieve Authority to Operate (ATO) for Defence systems.
• Engage Defence stakeholders to support ATO workflows and outcomes.
• Develop and maintain core security artefacts (SAP, BIL, E8 assessments, SSP, SSP-A, SRMP, IRP, CMP, SCCG, POA&M).
• Lead continuous improvement in cyber security governance, policy development, and best-practice implementation.
• Risk management across Defence information environments, including identification, mitigation, and reporting.
• Operate within Defence networks, integration into the Single Information Environment, acceptance into service, and transition to sustainment.

Skills

Governance

Risk management

A&A frameworks

ISM

PSPF

DSPF

NIST

Security documentation

Stakeholder engagement

Analytics

Education

Bachelor's degree

Cyber security

Job description

C4i Solutions in Sydney is seeking a Cyber Security GRC specialist to support secure and compliant outcomes across Defence programs. You will drive governance, risk assessment, and regulatory alignment with ISM, PSPF, DSPF, and NIST, delivering risk-based advice and accreditation support.

The role focuses on developing security artefacts, leading CSAAF processes to obtain ATO, and embedding governance practices to strengthen cyber maturity while coordinating with Defence stakeholders in a