Cyber Governance, Risk & Compliance Specialist
Core
Develop and maintain information security policies, conduct risk assessments, support compliance with Australian Government standards, and coordinate security audits.
Role type
Cyber Governance, Risk & Compliance Specialist
Builds
Security policies, risk assessments, compliance reports, and audit evidence
Domain
Cybersecurity, Australian Government compliance
Deliverable
dashboards & analysis
Required skills
Cyber security governance, risk assessment, compliance management, audit coordination, third-party risk management, security control validation, incident response support, stakeholder reporting
Preferred skills
Knowledge of NIST, ISO 27001, CIS Controls, SIEM, IDS/IPS, endpoint security solutions
Technologies
SIEM, IDS/IPS, endpoint security solutions
Responsibilities
Develop and maintain information security policies, standards, procedures and guidelines; Conduct cyber security risk assessments across applications, technology assets and third-party vendors; Identify security risks and coordinate remediation, tracking and reporting; Support compliance against the Australian Government Information Security Manual (ISM) and other relevant security frameworks; Coordinate internal and external security audits, including evidence gathering and remediation activities; Support third-party security risk management, vendor assessments and ongoing monitoring; Assist with the implementation and validation of controls across IAM, encryption, logging, vulnerability management, patching, network security and endpoint protection; Develop security risk and compliance reporting for senior stakeholders; Support security incident response, root-cause analysis and continuous improvement of controls; Partner with technical teams to provide security and compliance guidance for new solutions and integrations
Seniority
Mid-level, hands-on IC