Overview

Governance, Risk, and Compliance (GRC) Specialist, AWS Security. Responsible for certification, accreditation, and authorisation activities to enable secure cloud capabilities for national security workloads. You will implement ISM, PSPF, DSPF, ASIO T4, and NIST frameworks into cloud architectures as foundational design decisions, collaborating with internal teams and customers to establish security baselines and control objectives.

Responsibilities

- Act as the GRC engine for designated physical and logical components within the cloud capability — owning assurance and authorisation activities end-to-end and ensuring adherence to standards and protocols that underpin national trust.
- Collaborate with internal teams and customers to establish security baselines, level-set requirements, and define control objectives that shape how the capability is built.
- Translate regulatory intent into engineering reality when ISM, PSPF, DSPF, ASIO T4, or NIST frameworks need to be woven into architecture.
- Create, optimise, and champion cross-functional working groups to drive security efficiency across the organisation.
- Develop thought leadership material on cloud and emerging technologies to strengthen the organisation's knowledge base and industry position.
- Navigate the balance between short-term delivery and long-term security goals with sound judgement and clear communication.
- Mentor and advise teams across AWS to elevate the broader security capability and foster a culture of security excellence.
- Deliver with exceptional attention to detail under tight deadlines, ensuring accuracy across security management activities.




- Contribute to a high-performing, diverse security team dedicated to continuous improvement and practical problem solving.

Qualifications

- Basic Qualifications
- 4+ years of experience in areas related to security assurance (cybersecurity, auditing, security architecture, regulatory affairs, or public sector cybersecurity management).
- Experience with governance, risk, and compliance programs involving interaction with regulatory bodies.
- Proficiency with government security frameworks, policies, and standards (e.g., PSPF, ISM, DSPF; ASD Essential Eight).
- Experience with cloud technologies.

- Preferred Qualifications

- Degree or equivalent in Computer Science, Engineering, Cyber Security, IT Security Management, Security Risk Management, or related field.
- Minimum 4 years of experience implementing and operating security to meet business outcomes.
- Proven ability to influence and lead business partners and supporting teams.
- Ability to credibly coordinate between technical teams and business stakeholders.
- Solid written and verbal communication skills, with ability to produce detailed business cases without reliance on PowerPoint.

Benefits

- Learning & development – AWS training and certification support, access to internal learning platforms.




- Health, income protection and life cover – private health insurance subsidies and group salary continuance and life insurance.
- Military differential pay (Australia) – up to 52 weeks in applicable defence reserve scenarios.
- Employee Assistance Program – confidential 24/7 support for mental health, financial coaching, legal questions, and everyday life events.
- Family-building benefit – fertility treatment, adoption support, surrogacy, and parenting coaching.
- Amazon Extras & employee discounts – cashback and discounts across retail, fitness, travel, and lifestyle partners.
- Inclusive, diverse team culture with mentorship and career-growth opportunities.

Acknowledgement of country: Amazon acknowledges the Traditional Custodians of country throughout Australia and their connections to land, sea and community. We pay our respect to their elders past and present and extend that respect to all Aboriginal and Torres Strait Islander peoples today.

IDE statement: Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. If you require a workplace accommodation or adjustment during the application or hiring process, please visit the Amazon accommodations page for more information.

Notes: This description reflects the role and responsibilities; it does not include page-load artifacts or ATS metadata. Location and posting date information has been omitted to maintain a clean, applicant-focused description.

#J-18808-Ljbffr

📌 Governance, Risk, and Compliance Specialist, AWS Security (City of Sydney)
🏢 Amazon
📍 City of Sydney