Defence GRC Consultant — Clearance Required

Cleared Recruitment; Canberra; On-site; AUD 120,000 - 170,000; Full time

Job summary

Cleared Recruitment in Canberra is seeking an experienced Governance, Risk and Compliance (GRC) professional to join a Defence-focused cyber security team. You will help ensure Defence systems meet ISM/PSPF standards and accreditation requirements throughout the lifecycle.

As a GRC Consultant, you will assess cyber risk, guidance on governance obligations, and support accreditation activities while collaborating with security authorities and technical stakeholders in a highly secure environment.

Qualifications

• Experience in governance, risk and compliance within secure or regulated environments.
• Strong knowledge of PSPF, ISM and Defence security standards.
• Experience producing security governance documentation (SSP, SRMP, IRP).
• Exposure to accreditation or Authority to Operate (ATO) in Defence or Government.
• Familiarity with IRAP or similar assurance frameworks.
• Experience with cloud environments (AWS) and traditional enterprise infra.
• Ability to operate across different classification levels with stakeholders.
• Minimum two years in cyber security or GRC; higher levels available.

Responsibilities

• Build and maintain relationships with Defence representatives, project teams and security partners.
• Provide governance guidance on control implementation and risk treatment.
• Lead activities related to system accreditation and authorisation processes.
• Prepare and maintain security assessment documentation for ISM and IS standards.
• Evaluate system compliance against Defence frameworks and ISM controls.
• Conduct cyber risk assessments and present findings and treatment plans.
• Collaborate with security, engineering and operations to embed security requirements.
• Identify security dependencies and compliance obligations early in delivery lifecycles.
• Monitor remediation actions and assure closure of findings.
• Contribute to continuous governance and risk management improvements.

Skills

GRC experience

PSPF/ISM knowledge

ATO processes

IRAP familiarity

Cloud/AWS experience

Stakeholder engagement

Communication skills

Defence sector experience

Analytical thinking

Job description

Cleared Recruitment in Canberra is seeking an experienced Governance, Risk and Compliance (GRC) professional to join a Defence-focused cyber security team. You will help ensure Defence systems meet ISM/PSPF standards and accreditation requirements throughout the lifecycle.

As a GRC Consultant, you will assess cyber risk, guidance on governance obligations, and support accreditation activities while collaborating with security authorities and technical stakeholders in a highly secure environment.