Cybersecurity Lead – GRC Specialist (6‑month contract)

About the role

This contract position is with a leading Australian telecommunications and technology organisation undergoing rapid transformation. As the Cybersecurity Lead you will own the delivery of Security of Critical Infrastructure (SOCI) and related regulatory compliance outcomes, working hands‑on with minimal direction.

Key responsibilities

• Drive completion of annual TSRMP/CIRMP attestations and support Board approval processes.
• Prepare Home Affairs notifications for offshore initiatives and manage TSRMP hazard domains.
• Develop and execute roadmaps to achieve SOCI compliance across acquired business assets.
• Finalize SOCI governance frameworks, RACI models and evidence packs.
• Translate NIST gap assessments into practical delivery activities.
• Establish governance structures, operational cadence and accountability for the Security GRC function.
• Collaborate with executive stakeholders, Legal, Risk and Technology teams to meet compliance obligations.

Required profile

• Proven experience delivering outcomes under the Security of Critical Infrastructure (SOCI) Act.
• Strong knowledge of TSRMP and CIRMP requirements.
• Track record of leading regulatory attestations, audits and evidence collection.
• Experience building governance frameworks and risk‑management operating models.
• Ability to work independently in a fast‑paced environment.

Required skills

• SOCI compliance
• TSRMP
• CIRMP
• NIST framework

What we offer

• Initial 6‑month contract with strong extension potential.
• Competitive daily rate.
• Hybrid working arrangement based in Melbourne CBD.