Senior Cyber GRC Consultant (Hybrid) - Defence & Govt

Leidos; Brisbane; Hybrid; AUD 246,000 - 307,000; Full time

Job summary

Leidos Australia is seeking a Senior Cyber GRC Consultant to lead governance, risk and compliance activities for defence and government projects in a hybrid Canberra/Brisbane role. You will mature the security posture, mentor staff, and drive automation within a complex environment.

The role requires Australian citizenship and NV-1 clearance with ability to uplift to NV-2. We offer a family-friendly culture and flexible, hybrid work options.

Qualifications

• 7–10 years of Cyber GRC experience; candidates with ~5 years in Defence may be considered
• Strong understanding of cybersecurity standards, regulations, and risk frameworks; experience in Defence environments and the Cyber Security Assessment and Authorisation Framework
• Excellent written and verbal communication (including executive-level reporting), strong analytical and problem-solving skills, and ability to work independently to deliver outcomes
• Certifications such as CISSP, CISA, CISM, CRISC, CGEIT, ISO 27001 Lead Implementer/Auditor, or IRAP highly regarded; experience in regulated sectors desirable
• Strategic thinking, risk-based decision-making, project management capability, regulatory acumen, and technical understanding of cybersecurity controls

Responsibilities

• Develop, implement, and maintain cybersecurity policies and standards aligned with frameworks (NIST CSF, ISO/IEC 27001, DSPF, ISM) and prepare security assessment documentation.
• Conduct and support risk assessments across systems and vendors, track remediation efforts, and coordinate audits to ensure regulatory and internal compliance.
• Review and assess third-party vendors for security risks, provide mitigation strategies, and support due diligence processes.
• Deliver security awareness programs, develop targeted training, and report GRC metrics via dashboards for leadership and working groups.
• Act as a trusted advisor, mentor junior team members, and identify opportunities for automation to mature the GRC function.

Skills

Cyber GRC

Defence environments

Regulatory compliance

Executive communication

Risk assessment

Job description

Leidos Australia is seeking a Senior Cyber GRC Consultant to lead governance, risk and compliance activities for defence and government projects in a hybrid Canberra/Brisbane role. You will mature the security posture, mentor staff, and drive automation within a complex environment.

The role requires Australian citizenship and NV-1 clearance with ability to uplift to NV-2. We offer a family-friendly culture and flexible, hybrid work options.