Governance, Risk and Compliance (GRC) Specialists

Bluerydge; Canberra; On-site; AUD 90,000 - 130,000; Full time

Job summary

Bluerydge is actively seeking experienced GRC Specialists to join our Canberra and Sydney teams on a permanent, full-time basis. You will help develop and improve cyber security governance, risk management, assurance and compliance across defence, government and critical infrastructure environments.

Ideal candidates have strong knowledge of Australian cyber security regulations and frameworks, plus experience in risk assessments, audits and regulatory reviews.

Qualifications

• Bachelor’s degree in Cybersecurity, IT, Business or related field.
• Minimum 3 years’ experience in Governance, Risk and Compliance.
• Experience within Government, Defence, critical infrastructure or other complex and regulated environments.
• Strong knowledge of Australian cyber security regulations, standards and governance frameworks.
• Demonstrated experience conducting risk assessments, internal audits and regulatory compliance reviews.
• Strong working knowledge of ISO 27001, NIST, PSPF, ISM and ASD Essential Eight.
• Experience developing or maintaining security policies, risk registers and compliance documentation.
• CISSP, CISM, CRISC or ISO 27001 Lead Auditor/Implementer certifications are highly regarded.

Responsibilities

• Developing, implementing and maintaining GRC frameworks, policies and procedures.
• Supporting compliance with ISM, PSPF, ASD Essential Eight, ISO 27001 and NIST.
• Conducting cyber security risk assessments, gap analyses and security audits.
• Identifying vulnerabilities, control gaps and areas of non-compliance.
• Developing and managing risk mitigation strategies.
• Maintaining risk registers, incident management plans and compliance dashboards.
• Supporting security incident response and regulatory risk management activities.
• Preparing risk, compliance and security governance reports for senior management and external auditors.
• Facilitating cyber security awareness and compliance workshops.
• Working closely with security architects, operations teams and other stakeholders to achieve security and compliance objectives.

Skills

GRC governance

risk assessment

stakeholder engagement

regulatory compliance

auditing

Education

Bachelor’s degree in Cybersecurity

Tools

GRC tools

risk management platforms

Job description

Governance, Risk and Compliance (GRC) Specialists

Governance, Risk and Compliance (GRC) Specialists

Bluerydge
Canberra ACT | Sydney NSW
Permanent, Full-Time Opportunities
Defence | Commonwealth Government | Critical Infrastructure

About Bluerydge

Bluerydge is an Australian-owned Defence and national security consultancy supporting Commonwealth agencies and industry with specialist cyber security, security and advisory capability.

We are currently growing our Governance, Risk and Compliance (GRC) team and are looking for experienced GRC professionals interested in joining Bluerydge on a permanent, full-time basis.

We are interested in candidates with experience across Government, Defence, critical infrastructure and other complex or highly regulated environments.

Rail industry experience is particularly desirable, with a current separate opportunity requiring relevant rail sector experience.

About the role

As a GRC Specialist, you will support the development and ongoing improvement of cyber security governance, risk management, assurance and compliance activities.

Depending on your experience and the engagement, your responsibilities may include:

Developing, implementing and maintaining GRC frameworks, policies and procedures

Supporting compliance with ISM, PSPF, ASD Essential Eight, ISO 27001 and NIST

Conducting cyber security risk assessments, gap analyses and security audits

Identifying vulnerabilities, control gaps and areas of non-compliance

Developing and managing risk mitigation strategies

Maintaining risk registers, incident management plans and compliance dashboards

Supporting security incident response and regulatory risk management activities

Preparing risk, compliance and security governance reports for senior management and external auditors

Facilitating cyber security awareness and compliance workshops

Working closely with security architects, operations teams and other stakeholders to achieve security and compliance objectives

About you

We are looking for GRC professionals who bring strong cyber security governance knowledge, sound risk judgement and the ability to work effectively with technical and non-technical stakeholders.

You will ideally have:

A Bachelor’s degree in Cybersecurity, Information Technology, Business or a related field

Minimum 3 years’ experience in Governance, Risk and Compliance

Experience within Government, Defence, critical infrastructure or other complex and regulated environments

Strong knowledge of Australian cyber security regulations, standards and governance frameworks

Demonstrated experience conducting risk assessments, internal audits and regulatory compliance reviews

Strong working knowledge of ISO 27001, NIST, PSPF, ISM and ASD Essential Eight

Experience developing or maintaining security policies, risk registers and compliance documentation

Strong stakeholder engagement and communication skills

Confidence working with senior stakeholders, security teams, auditors and regulators

Experience with GRC tools and risk management platforms

Experience across rail, transport, energy, utilities, telecommunications or similar critical infrastructure environments will be highly regarded.

Candidates with rail industry experience are particularly encouraged to apply, with a current separate requirement specifically seeking this background.

Relevant certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Auditor/Implementer will also be highly regarded.

This is an opportunity to join a growing cyber security team and contribute to meaningful security and risk outcomes across Defence, Government and critical infrastructure environments.

Bluerydge offers:

Opportunities across Canberra and Sydney

Exposure to complex Defence, Government and critical infrastructure environments

Opportunities to work across a range of cyber security governance, risk and assurance activities

Career development within a growing specialist cyber security team

Competitive remuneration

A professional and collaborative working environment

Due to the nature of our work, applicants must:

Be an Australian Citizen

Hold a minimum NV1 Australian Government Security Clearance

If you are an experienced GRC professional looking to take the next step in your career, we’d love to hear from you.

Professionals with rail industry experience are particularly encouraged to apply.