Lead Cyber Security Adviser (GRC)

Trident Group; Australia; Remote; AUD 150,000 - 190,000; Full time

Job summary

Trident Group is seeking a Lead Cyber Security Adviser (GRC) with EL1-level experience to provide strategic and operational security guidance aligned to government policy. You will lead governance, risk and compliance activities across PSPF, ISM, Essential Eight and NIST, and oversee system security plans and accreditation.

You will engage senior stakeholders, manage a small team, and ensure audit readiness while maintaining NV1 clearance.

Qualifications

• Demonstrated experience delivering cyber security uplift, resilience or compliance in large ICT environments.
• Ability to interpret and apply PSPF, ISM, Essential Eight and NIST frameworks.
• Experience engaging stakeholders and guiding executives on risk, policy and security controls.

Responsibilities

• Lead Governance, Risk and Compliance (GRC) activities aligning with government policy.
• Oversee system security plans (SSPs) and security accreditation processes.
• Manage security risk assessments, business impact analyses and vendor assessments against security baselines.
• Develop, update and communicate cyber security policies, guidelines and procedures.

Skills

GRC leadership

EL1 governance

PSPF

ISM

Essential Eight

NIST

Security risk assessments

Audit readiness

Security governance

Job description

# Lead Cyber Security Adviser (GRC)Job Reference: #9997Federal Government DepartmentNV1 RequiredAustralian CitizenServices AustraliaQLD, ACT, VIC, NSW, SAContractCloses 11/11/2026GRCPSPFISMEssential EightNISTSystem Security Plans (SSPs)System AccreditationSecurity Risk AssessmentsBusiness Impact AnalysisIAMCloud SecurityEndpoint SecurityNetwork SecuritySecurity OperationsAuditing & ComplianceISACA AI SecurityISACA AI AuditShare## About the RoleRole Overview:Policy and governance: write, update and maintain internal information security policies, guidelines and procedures; develop, implement and review cyber security guidelines, standards and procedures; interpret and develop cyber security policy and contribute to its implementation. Risk and assurance: identify, assess and prioritise information security and IT-related risks and decide how to mitigate or accept them; manage security risk assessments, business impact analysis and assurance of tools, websites, applications and processes; manage security control activities and review information system designs for vulnerabilities and potential breaches, recommending improvements; assess and resolve cyber security risks using appropriate mitigations and strategies; review third-party software and vendors against the organisation's security baseline; prepare the organisation for internal and external audits by monitoring adherence to standards. Advice and capability: support stakeholders to embed cyber security standards, policies and guidelines and increase compliance; resolve or escalate highly sensitive and complex cyber security enquiries; provide expert advice on the security features and capabilities of ICT hardware and software products and manage security administration activities; advocate for security awareness including risk management trends and mitigations. Leadership: manage the operations of a team including performance, resources, workflows and priorities; act in line with the APS Values and Code of Conduct and exercise delegations.Key Responsibilities:• Lead Cyber Security Adviser with Governance, Risk and Compliance (GRC) experience at EL1 level - strategic and operational security advice aligned to business objectives and government policy.• Hands-on with PSPF, ISM, Essential Eight and NIST; system accreditation, System Security Plans (SSPs) and security assessment processes.• Manages security risk assessments, business impact analysis and assurance of tools, websites, applications and processes; reviews system designs and third-party vendors against the security baseline.• Writes and maintains security policies, guidelines, standards and procedures; prepares the agency for internal and external audits.• Track record delivering cyber uplift, cyber resilience, remediation or compliance initiatives in large, complex, regulated (ideally Australian Government) ICT environments.• Familiar with network, endpoint and application security controls; enterprise cloud, IAM, security operations, infrastructure and data services environments.• Engages and influences senior executives, technical specialists, business areas and external providers; manages a team; mentors and builds capability.• SFIA: Information security SCTY 5, Specialist advice TECH 5, Methods and tools METL 5, Security operations SCAD 4, Performance management PEMT 5, Stakeholder relationship management RLMT 5.• MUST HOLD and maintain a current NV1 security clearance (Australian citizens only).### About the ClientA major Australian Federal Government agency delivering government payments and services.## RequirementsEssential Criteria:1. Demonstrated experience delivering cyber security uplift, cyber resilience, security remediation or compliance initiatives within large and complex ICT environments, preferably within Australian Government or other regulated environments.2. Demonstrated and proven experience performing the duties and responsibilities relevant to the role being applied for, including the required technical skills, technologies, frameworks and methodologies identified in the RFQ.3. Demonstrated experience applying cyber security frameworks, policies and standards, including the Protective Security Policy Framework (PSPF), Information Security Manual (ISM), Essential Eight and other relevant security and risk management frameworks.4. Demonstrated ability to engage, influence and collaborate with a broad range of stakeholders, including senior executives, technical specialists, business representatives and external providers.5. Must hold and maintain a current Negative Vetting Level 1 (NV1) Security Clearance.Desirable Criteria:• Demonstrated experience delivering cyber security, infrastructure, ICT transformation or uplift activities within Services Australia or other Australian Government agencies.• Demonstrated experience identifying, assessing and managing cyber security risks, vulnerabilities, compliance obligations and remediation activities.• Experience working within large-scale enterprise environments involving cloud platforms, identity and access management, security operations, infrastructure, applications and data services.• Demonstrated ability to deliver outcomes within tight timeframes while managing competing priorities, dependencies and stakeholder expectations. Demonstrated ability to communicate complex technical and cyber security concepts to both technical and non-technical audiences and contribute to capability uplift through mentoring, collaboration and knowledge transfer activities.• ISACA AI Security training and AI Audit training.Interested in this role? Submit your application today.