Cyber Security GRC Specialist (Adelaide/Canberra)

About the role

We are seeking an experienced Cyber Security Specialist with a focus on Governance, Risk & Compliance (GRC) to support Australian Defence programmes. The role is a long‑term day‑rate contract based in Adelaide or Canberra and requires an active AGSVA TSPV or NV2 security clearance.

Key responsibilities

• Provide cyber security governance, assurance and risk oversight across Defence programmes, ensuring alignment with Defence ICT, security and engineering frameworks.
• Define and communicate clear cyber security requirements to industry partners and Managed Service Providers.
• Conduct structured, evidence‑based cyber risk assessments to guide programme decisions and accreditation pathways.
• Review and assure cyber security solutions and technical designs for compliance and Defence readiness.
• Maintain governance artefacts, risk registers, assurance reports and compliance documentation.
• Mentor and guide MSP and Commonwealth cyber security staff to uplift capability.
• Engage with stakeholders across Defence, primes and industry to ensure transparency and effective risk communication.

Required profile

• Minimum 5 years experience in GRC, cyber assurance, risk or compliance roles.
• Active NV2 security clearance (TSPV highly regarded).
• Experience working within Defence, CASG, CIOG or Defence‑aligned programmes.
• Strong knowledge of ISM, PSPF, DSPF, Defence security policy and ICT governance frameworks.
• Excellent communication skills with the ability to influence and guide stakeholders.

Required skills

• Governance, Risk & Compliance (GRC) methodologies
• Cyber risk assessment techniques
• Defence security frameworks: ISM, PSPF, DSPF
• Technical review and assurance of cyber security solutions
• Relevant certifications: CISSP, CISM, CRISC, IRAP training