Cyber Security- GRC Manager- AU Citizen with Security Clearance
Core
Security Assessment and Authorisation (A&A) consultant performing security risk management and assurance activities to ensure systems meet security standards and obtain Authority to Operate (ATO).
Role type
Senior IC Security Assessment and Authorisation Consultant
Builds
Security accreditation documentation, risk assessments, and compliance evidence for Australian government systems.
Domain
Cybersecurity / Government Compliance (Australian ISM/PSPF)
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Security risk assessment, ISM (Information Security Manual) knowledge, Essential Eight compliance, GRC tooling management, security documentation creation, stakeholder engagement for A&A lifecycle
Preferred skills
CISM, CRISC, CISSP, IRAP Assessor, NIST guidelines familiarity, SharePoint/Confluence proficiency
Technologies
ISM, Essential Eight, NIST, GRC platforms, SharePoint, Confluence
Responsibilities
Conduct risk assessments to identify and mitigate security risks; Execute system security authorisation processes per ISM and RMF steps; Develop and maintain security policies and accreditation documentation; Liaise with Authorising Officers and system owners to validate security controls; Monitor and report on risk status and compliance gaps to governance forums; Support establishment and management of GRC tooling.
Seniority
Senior, hands-on IC
