GRC Analyst – Defence ICT & Compliance Architect

Leidos Australia; Canberra; On-site; AUD 110,000 - 140,000; Full time

Job summary

Leidos Australia is seeking a GRC Analyst to provide governance and oversight across Defence ICT capabilities. You will work with architects, engineers and delivery teams to ensure lifecycle governance from design to operations.

The role emphasizes risk assessment, compliance and assurance, with collaboration across multidisciplinary teams to meet security standards and accreditation requirements.

Qualifications

• Proven experience in Governance, Risk and Compliance (GRC) within ICT, Defence or government environments.
• Strong understanding of security frameworks, risk management and compliance practices.
• Experience supporting ATO / accreditation / assurance processes in regulated environments.

Responsibilities

• Provide GRC leadership and oversight across delivery activities
• Lead development and review of governance, risk and compliance documentation
• Ensure alignment with Defence security requirements and Authorisation to Operate (ATO/ATO-C) frameworks
• Conduct and support security architecture reviews and assurance activities
• Identify, assess and manage risks, vulnerabilities and compliance gaps
• Provide guidance on security controls, governance frameworks and compliance obligations
• Support embedded assessor and assurance processes
• Collaborate with technical teams to ensure compliance is integrated into solution design and delivery
• Contribute to evidence generation to support Commonwealth acceptance and assurance activities

Skills

GRC

Governance

Risk & Compliance

Security frameworks

ATO accreditation

Stakeholder engagement

Delivery teams

Job description

Leidos Australia is seeking a GRC Analyst to provide governance and oversight across Defence ICT capabilities. You will work with architects, engineers and delivery teams to ensure lifecycle governance from design to operations.

The role emphasizes risk assessment, compliance and assurance, with collaboration across multidisciplinary teams to meet security standards and accreditation requirements.