Strategic Cyber GRC Lead — Governance & Risk

CEA Technologies, Inc.; Canberra; On-site; AUD 180,000 - 230,000; Full time

Benefits offered by this job

Six weeks leave

14% Superannuation

Free parking

Parental leave

Employee assistance

Health insurance

Novated leasing

Growth opportunities

Job summary

CEA Technologies is seeking a Governance, Risk and Compliance Cyber Lead to drive the cyber security governance, risk and compliance outcomes across the organisation. You will oversee documentation, assessments and authorisation processes to ensure IT systems meet cyber risk requirements and compliance standards.

The role requires engaging with stakeholders and providing trusted advisory support within the Cyber Security team, leading system authorisation activities and contributing to security

Qualifications

• Demonstrated experience in cyber governance, risk and compliance.
• Knowledge of DSPF, ISM and E8 frameworks.
• Ability to engage with IT operations and stakeholders.
• Eligibility to obtain AGSVA clearance.

Responsibilities

• Enhance cyber security posture through governance, risk and compliance leadership.
• Plan, implement and manage governance, risk and compliance systems and outcomes.
• Support policy and documentation development.
• Lead system authorisation activities with internal and external engagements.
• Support security architecture design and operations.
• Conduct risk assessments within ERM frameworks and authorising bodies.
• Document performance metrics for corporate reporting cycles.
• Liaise with stakeholders and vendors to support security solutions.

Skills

Governance & compliance

Cyber security

Risk assessment

Communication skills

Stakeholder engagement

DSPF/ISM/E8 knowledge

AGSVA clearance eligibility

Networking principles

MITRE ATTACK knowledge

Job description

CEA Technologies is seeking a Governance, Risk and Compliance Cyber Lead to drive the cyber security governance, risk and compliance outcomes across the organisation. You will oversee documentation, assessments and authorisation processes to ensure IT systems meet cyber risk requirements and compliance standards.

The role requires engaging with stakeholders and providing trusted advisory support within the Cyber Security team, leading system authorisation activities and contributing to security