GRC Specialist, AWS Security for National Cloud

Australian Compliance Institute; Sydney; Hybrid; AUD 140,000 - 210,000; Full time

Benefits offered by this job

AWS training and certification support

Private health insurance & life cover

Military differential pay (Australia)

Job summary

Amazon Web Services is seeking a Governance, Risk, and Compliance (GRC) Specialist to lead certification, accreditation and authorisation activities for our cloud capabilities in Australia. You will implement ISM, PSPF, DSPF, ASIO T4, and NIST controls, shaping security baselines and control objectives across complex architectures.

You’ll mentor teams and contribute to security strategy and policy. You’ll work with cross-functional teams and customers to establish security baselines, develop

Qualifications

• 4+ years experience in security assurance (cybersecurity, auditing, security architecture or regulatory affairs).
• Experience with governance, risk and compliance programs involving regulatory bodies.
• Proficiency with government security frameworks (PSPF, ISM, DSPF).
• Experience working with cloud technologies and cloud security controls.

Responsibilities

• Own assurance and authorisation activities end-to-end for designated cloud components.
• Translate regulatory intent into engineering reality when ISM/PSPF/DSPF/ASIO T4/NIST are applied.
• Lead cross-functional groups to drive security efficiency across the organisation.
• Develop thought leadership on cloud security and emerging technologies.
• Mentor teams across AWS and contribute to the security capability maturation.

Skills

Security governance

Risk management

Compliance programs

Cloud security

Education

Bachelor's degree or equivalent in security field

Tools

PSPF / ISM / DSPF frameworks

ASD Essential Eight

Job description

Amazon Web Services is seeking a Governance, Risk, and Compliance (GRC) Specialist to lead certification, accreditation and authorisation activities for our cloud capabilities in Australia. You will implement ISM, PSPF, DSPF, ASIO T4, and NIST controls, shaping security baselines and control objectives across complex architectures.

You’ll mentor teams and contribute to security strategy and policy. You’ll work with cross-functional teams and customers to establish security baselines, develop