Defence GRC Cyber Security Lead (Canberra)

Leidos LLC; North Canberra; On-site; AUD 90,000 - 150,000; Full time

Job summary

Leidos Australia seeks a Governance Risk and Compliance specialist to support GEO SPACES contracts in Canberra. You will lead IT security governance, risk management, and compliance across Defence ICT capabilities, ensuring alignment with security standards throughout the lifecycle.

Ideal candidates have NV2, willingness to uplift to TSPV/DISA, and ability to support security authorisation and assurance processes within regulated government environments.

Qualifications

• Proven experience in Governance, Risk and Compliance (GRC) within ICT or government environments.
• Strong understanding of security frameworks, risk management, and compliance practices.
• Experience supporting Security authorisation and assurance processes in regulated environments.

Responsibilities

• Provide IT Security leadership and oversight across key ICT capabilities.
• Develop and review IT Security governance and compliance documentation (SSP, SSP-Annex, SRMP, Essential 8).
• Ensure alignment with Defence security requirements and Authorisation to Operate frameworks.
• Conduct IT Security reviews and assurance activities for key ICT capabilities.
• Identify and manage Cyber Security risks, vulnerabilities, and compliance gaps.
• Provide guidance on IT security controls, governance frameworks, and compliance obligations.
• Support IRAP and embedded assessors undertaking assurance processes.
• Collaborate with technical teams to embed Cyber Security in design and delivery.
• Contribute to evidence generation to support Commonwealth acceptance and assurance.

Skills

GRC

Security frameworks

Risk management

Stakeholder engagement

Compliance

Tools

SSP

ISM

Job description

Leidos Australia seeks a Governance Risk and Compliance specialist to support GEO SPACES contracts in Canberra. You will lead IT security governance, risk management, and compliance across Defence ICT capabilities, ensuring alignment with security standards throughout the lifecycle.

Ideal candidates have NV2, willingness to uplift to TSPV/DISA, and ability to support security authorisation and assurance processes within regulated government environments.