GRC Analyst (5‑month contract)

About the role

The GRC Analyst will provide governance authority and oversight for Defence ICT capability delivery, ensuring alignment with security standards, risk frameworks and compliance requirements. You will work closely with architects, engineers and delivery teams throughout the project lifecycle.

Key responsibilities

• Lead development and review of governance, risk and compliance documentation.
• Ensure alignment with Defence security requirements and Authorisation to Operate (ATO/ATO‑C) frameworks.
• Conduct security architecture reviews and support assurance activities.
• Identify, assess and manage risks, vulnerabilities and compliance gaps.
• Collaborate with technical teams to embed compliance into solution design and delivery.

Required profile

• Proven experience in Governance, Risk and Compliance (GRC) within ICT, Defence or government environments.
• Strong understanding of security frameworks, risk management and compliance practices.
• Ability to review and interpret technical designs from a governance and risk perspective.
• Excellent stakeholder engagement and communication skills.

Required skills

• Experience supporting ATO/accreditation processes in regulated environments.
• Knowledge of security control frameworks and audit processes.

What we offer

• Flexible work options including part‑time, job sharing and compressed hours.
• Wellbeing support such as free Headspace access and dedicated wellness spaces.
• Learning opportunities with over 120,000 on‑demand courses.
• Opportunity to work on nationally significant projects in defence and security.