Defence IT GRC Analyst – Security & Compliance

Leidos LLC; North Canberra; On-site; AUD 110,000 - 160,000; Full time

Benefits offered by this job

Health and Wellness programs

Income Protection

Paid Leave and Retirement

Job summary

Leidos Australia is seeking a GRC Analyst to provide governance, risk and compliance oversight across Defence ICT capabilities. You will work with architects, engineers and delivery teams to embed governance throughout the lifecycle—from design to testing and transition to operations.

Essential experience includes GRC in ICT/Defence/government, understanding of risk frameworks, ATO/accreditation processes, and strong stakeholder communication.

Qualifications

• Proven experience in Governance, Risk and Compliance (GRC) within ICT, Defence or government environments.
• Strong understanding of security frameworks, risk management and compliance practices.
• Experience supporting ATO / accreditation / assurance processes in regulated environments.
• Ability to review and interpret technical designs from a governance and risk perspective.
• Strong stakeholder engagement skills, with ability to communicate risk, compliance and assurance concepts clearly.
• Experience working across multidisciplinary delivery teams.

Responsibilities

• Provide GRC leadership and oversight across delivery activities.
• Lead development and review of governance, risk and compliance documentation.
• Ensure alignment with Defence security requirements and Authorisation to Operate (ATO/ATO-C) frameworks.
• Conduct and support security architecture reviews and assurance activities.
• Identify, assess and manage risks, vulnerabilities and compliance gaps.
• Provide guidance on security controls, governance frameworks and compliance obligations.
• Support embedded assessor and assurance processes.
• Collaborate with technical teams to ensure compliance is integrated into solution design and delivery.
• Contribute to evidence generation to support Commonwealth acceptance and assurance activities.

Skills

GRC

Security frameworks

Stakeholder engagement

Regulated environments

Risk management

Job description

Leidos Australia is seeking a GRC Analyst to provide governance, risk and compliance oversight across Defence ICT capabilities. You will work with architects, engineers and delivery teams to embed governance throughout the lifecycle—from design to testing and transition to operations.

Essential experience includes GRC in ICT/Defence/government, understanding of risk frameworks, ATO/accreditation processes, and strong stakeholder communication.