GRC Specialist – Government & Critical Infra

Bluerydge; Canberra; On-site; AUD 90,000 - 130,000; Full time

Job summary

Bluerydge is actively seeking experienced GRC Specialists to join our Canberra and Sydney teams on a permanent, full-time basis. You will help develop and improve cyber security governance, risk management, assurance and compliance across defence, government and critical infrastructure environments.

Ideal candidates have strong knowledge of Australian cyber security regulations and frameworks, plus experience in risk assessments, audits and regulatory reviews.

Qualifications

• Bachelor’s degree in Cybersecurity, IT, Business or related field.
• Minimum 3 years’ experience in Governance, Risk and Compliance.
• Experience within Government, Defence, critical infrastructure or other complex and regulated environments.
• Strong knowledge of Australian cyber security regulations, standards and governance frameworks.
• Demonstrated experience conducting risk assessments, internal audits and regulatory compliance reviews.
• Strong working knowledge of ISO 27001, NIST, PSPF, ISM and ASD Essential Eight.
• Experience developing or maintaining security policies, risk registers and compliance documentation.
• CISSP, CISM, CRISC or ISO 27001 Lead Auditor/Implementer certifications are highly regarded.

Responsibilities

• Developing, implementing and maintaining GRC frameworks, policies and procedures.
• Supporting compliance with ISM, PSPF, ASD Essential Eight, ISO 27001 and NIST.
• Conducting cyber security risk assessments, gap analyses and security audits.
• Identifying vulnerabilities, control gaps and areas of non-compliance.
• Developing and managing risk mitigation strategies.
• Maintaining risk registers, incident management plans and compliance dashboards.
• Supporting security incident response and regulatory risk management activities.
• Preparing risk, compliance and security governance reports for senior management and external auditors.
• Facilitating cyber security awareness and compliance workshops.
• Working closely with security architects, operations teams and other stakeholders to achieve security and compliance objectives.

Skills

GRC governance

risk assessment

stakeholder engagement

regulatory compliance

auditing

Education

Bachelor’s degree in Cybersecurity

Tools

GRC tools

risk management platforms

Job description

Bluerydge is actively seeking experienced GRC Specialists to join our Canberra and Sydney teams on a permanent, full-time basis. You will help develop and improve cyber security governance, risk management, assurance and compliance across defence, government and critical infrastructure environments.

Ideal candidates have strong knowledge of Australian cyber security regulations and frameworks, plus experience in risk assessments, audits and regulatory reviews.