Cyber Security Specialist – GRC (ATO) – Adelaide

About the role

Northrop Grumman Australia is expanding its MQ-4C Triton Unmanned Aircraft System team in Adelaide. The Cyber Security Specialist will own the Governance, Risk & Compliance (GRC) process that enables Triton systems to achieve and maintain Authority to Operate (ATO) within Defence authorisation pathways.

Key responsibilities

• Develop and maintain security artefacts for Assessment & Authorisation (A&A) processes.
• Support system approvals, re‑authorisations and changes through the A&A lifecycle.
• Conduct risk assessments, present treatment options and manage Plans of Action & Milestones (PoAMs).
• Maintain system risk registers and assess security impact of upgrades or modifications.
• Engage with engineers, stakeholders and Defence authorities to secure approvals.

Required profile

• Structured, analytical mindset with ability to translate complex technical systems into clear, defensible documentation.
• Experience in cyber GRC, risk management or A&A within Defence, government or regulated environments.
• Comfortable working with security frameworks such as the Australian Information Security Manual (ISM).
• Australian citizenship and an active NV1 security clearance.

Required skills

• Governance, Risk & Compliance (GRC) processes
• Risk assessment and treatment planning
• Security artefact creation for A&A
• Familiarity with the Information Security Manual (ISM) framework

What we offer

• Professional development opportunities, including further education and industry memberships.
• Purchased annual leave (2 weeks) and salary packaging options.
• Generous paid parental leave (18 weeks) and volunteer leave.