Senior Cyber Security GRC Consultant

About the role

The Senior Cyber Security GRC Consultant will provide cyber security advice and oversight for Defence ICT capabilities, ensuring alignment with security standards, risk frameworks and compliance requirements on the GEO SPACES contract.

Key responsibilities

• Develop and review governance and compliance documentation such as System Security Plans, ISM Compliance Matrices, Security Risk Management Plans and Essential 8 assessments.
• Conduct security reviews, assurance activities and risk assessments for key ICT capabilities, supporting authorisation to operate processes.
• Collaborate with architects, engineers and delivery teams to embed security controls throughout the technology lifecycle.
• Support IRAP assessors and generate evidence for Commonwealth acceptance and assurance.

Required profile

• Australian citizen with a TSPV security clearance and ability to obtain DISA clearance.
• Proven experience in governance, risk and compliance within ICT or government environments.
• Strong understanding of security frameworks, risk management and compliance practices.
• Excellent stakeholder engagement and ability to interpret technical designs from a security perspective.

Required skills

• Security governance and compliance documentation (SSP, ISM matrix, SRMP).
• Risk management and vulnerability assessment.
• Experience with Defence security requirements and Authorisation to Operate frameworks.
• Knowledge of IRAP processes and Essential 8 security controls.

What we offer

• Flexible work arrangements including part‑time, job sharing and compressed hours.
• Wellbeing support such as free Headspace access and dedicated wellness spaces.
• Access to over 120,000 on‑demand learning courses.
• Opportunities to work on nationally significant projects with a purpose‑driven culture.