Cyber Security GRC Consultant

About the role

The Governance Risk and Compliance (GRC) Consultant will provide cyber security advice and oversight for Defence ICT capabilities on the GEO SPACES contract. This fixed‑term role requires an Australian citizen with an active NV2 clearance willing to uplift to TSPV and support DISA/OSA requirements.

Key responsibilities

• Provide IT security leadership and oversight across key ICT capabilities.
• Develop and review security governance and compliance documentation such as System Security Plans, ISM Compliance Matrices, Security Risk Management Plans, and Essential 8 assessments.
• Conduct security reviews, assurance activities, and risk assessments for ICT systems.
• Support IRAP assessors and generate evidence for Commonwealth acceptance.

Required profile

• Proven experience in GRC within ICT or government environments.
• Strong understanding of security frameworks, risk management, and compliance practices.
• Ability to interpret technical designs from a security governance perspective.
• Excellent stakeholder engagement and communication skills.

Required skills

• Governance Risk Compliance (GRC)
• IT Security governance and compliance documentation
• Security Risk Management
• System Security Plan (SSP) development
• ISM Compliance Matrix
• Essential 8 assessments
• IRAP processes
• DISA/TSPV clearance requirements

What we offer

• Flexible work arrangements including part‑time, job sharing and compressed hours.
• Wellbeing support such as free Headspace access and dedicated wellness spaces.
• Access to over 120,000 on‑demand learning courses.
• Opportunities to work on nationally significant, mission‑critical projects.