GRC Security Specialist: Cloud Compliance & Assurance

Amazon Inc.; Sydney; On-site; AUD 140,000 - 200,000; Full time

Job summary

Amazon Web Services Australia Pty Ltd is seeking a GRC Specialist to contribute to certification, accreditation, assurance and authorisation activities across the security program.

The role requires a broad understanding of regulatory landscapes, cloud technologies, and security/compliance experience, with responsibilities spanning implementing frameworks like PSPF/ISM/DSPF and coordinating cross-functional teams to strengthen the organization’s security posture.

Qualifications

• 7+ years experience in security assurance, cybersecurity, auditing, or related fields.
• Experience with governance, risk and compliance programs involving regulatory bodies.
• Proficient with government security frameworks PSPF, ISM, DSPF, ASD Essential Eight.
• Experience with cloud technologies.

Responsibilities

• Serve as the GRC Specialist for designated cloud components to perform assurance and authorization activities ensuring adherence to standards.
• Collaborate with internal teams and customers to establish baselines and security requirements, controls and objectives.
• Implement PSPF, ISM, DSPF, ASD Essential Eight into design baselines to achieve the required security posture.
• Create and support cross-functional working groups to enhance security efficiency and effectiveness.
• Develop thought leadership material on cloud and emerging technologies to contribute to the knowledge base.
• Deliver to tight deadlines with attention to detail in all security management aspects.

Skills

Security governance

Cloud security

Stakeholder coordination

Security communications

Education

Bachelor's degree in Computer Science, Cyber Security, IT Security Management

Tools

PSPF

ISM

DSPF

ASD Essential Eight

Job description

Amazon Web Services Australia Pty Ltd is seeking a GRC Specialist to contribute to certification, accreditation, assurance and authorisation activities across the security program.

The role requires a broad understanding of regulatory landscapes, cloud technologies, and security/compliance experience, with responsibilities spanning implementing frameworks like PSPF/ISM/DSPF and coordinating cross-functional teams to strengthen the organization’s security posture.