Location: Canberra, ACTEmployment Type: Contract (12 Months)Extension: 12-Month Extension AvailableWork Arrangement: Full-Time Onsite (Temporary WFH may be considered on a case-by-case basis)Hours: Up to 45 Hours Per WeekSecurity Clearance: Must hold or be able to obtain Negative Vetting Level 1 (NV1) (Candidates who already hold an active NV1 clearance will be highly regarded.)
About the OpportunitySkyDB is seeking an experienced Senior Cyber Security GRC Specialist to join a high-performing cyber security team supporting a large-scale Australian Government cyber resilience and security uplift program. This is an exciting opportunity for an experienced Governance, Risk and Compliance (GRC) professional to contribute to the protection of nationally significant ICT systems and critical digital infrastructure.
The successful candidate will play a pivotal role in ensuring cyber security requirements are embedded throughout the solution lifecycle, supporting governance activities, coordinating security assurance engagements, and developing security documentation that enables informed executive decision-making.
In addition to supporting long-term cyber resilience initiatives, the successful candidate will also assist during major operational events where maintaining the integrity, availability and security of critical systems is essential. This role offers the opportunity to work alongside experienced cyber security professionals while influencing enterprise-wide security outcomes across a complex government setting.
About the RoleAs the Senior Cyber Security GRC Specialist, you will provide expert advice across Governance, Risk and Compliance activities while working closely with project teams, architects, technical specialists, security practitioners and senior stakeholders.You will be responsible for ensuring new and existing ICT solutions align with Australian Government cyber security standards and frameworks, while helping deliver secure, compliant and resilient technology outcomes.You will also support security assurance activities including IRAP assessments, penetration testing, risk management, security documentation and accreditation processes.The ideal candidate will have strong experience interpreting Australian Government cyber security frameworks and translating security requirements into practical outcomes for technical and business teams.
Key ResponsibilitiesAs part of this role, you will:Provide cyber security governance, risk and compliance (GRC)



expertise across enterprise ICT projects and operational initiatives.Review solution designs and provide recommendations to ensure appropriate cyber security controls are incorporated from the outset.Identify security risks and develop practical mitigation strategies that align with organisational policies and Australian Government standards.Develop and maintain a broad range of security documentation including:Security Risk AssessmentsSecurity RequirementsSecurity PlansSystem Security DocumentationExecutive Briefing PapersGovernance ReportsCoordinate and support security assurance activities including:IRAP AssessmentsPenetration TestingSecurity ReviewsRemediation TrackingWork closely with technical teams to ensure security recommendations are effectively implemented.Prepare transparent, concise documentation and reports to support senior executive decision-making.Support security accreditation and compliance activities throughout project delivery.Engage with internal and external stakeholders to ensure security obligations are understood and achieved.Contribute to continuous improvement initiatives across cyber governance, assurance and risk management processes.Provide additional cyber security support during critical operational periods and major organisational events.
Key Skills & ExperienceThe successful candidate will possess strong experience across several of the following areas:Cyber Security Governance & ComplianceExtensive experience performing Cyber Security Governance, Risk and Compliance (GRC) functions within complex ICT environments.Strong understanding of security governance principles, risk management methodologies and compliance frameworks.Experience interpreting security policies and translating them into practical technical and business requirements.Australian Government Security FrameworksDemonstrated knowledge and practical experience working with:Information Security Manual (ISM)Protective Security Policy Framework (PSPF)Essential Eight Maturity ModelAustralian Government cyber security standards and assurance processesSecurity AssuranceExperience supporting or coordinating activities including:IRAP AssessmentsPenetration TestingSecurity ReviewsSecurity AccreditationRisk AssessmentsCompliance ReportingSecurity Control ValidationDocumentation & GovernanceStrong experience producing high-quality security documentation including:Security Risk AssessmentsGovernance ArtefactsSecurity PlansPolicies & StandardsSecurity RequirementsExecutive ReportsCompliance DocumentationStakeholder EngagementExperience working with business, technical and executive stakeholders.Ability to communicate complex cyber security concepts to both technical and non-technical audiences.Excellent written communication and presentation skills.Professional SkillsStrong analytical and critical thinking ability.Excellent problem-solving skills.Ability to prioritise competing workloads.High attention to detail.Self-motivated with the ability to work independently.Strong collaboration and teamwork skills.
Essential RequirementsTo be successful in this role you should demonstrate:Proven experience in a Cyber Security Governance, Risk & Compliance (GRC) role.Strong working knowledge of the Information Security Manual (ISM), Protective Security Policy Framework (PSPF) and Essential Eight.Experience developing cyber security governance documentation and security artefacts.Experience coordinating or supporting security assurance activities such as IRAP assessments and penetration testing.Solid stakeholder engagement and communication skills.Ability to obtain a Negative Vetting Level 1 (NV1) Security Clearance prior to commencement.
Highly DesirableCandidates will be highly regarded if they possess:Current Negative Vetting Level 1 (NV1) Security Clearance.Five or more years’ experience working within Cyber Security GRC.Experience supporting Australian Government departments or agencies.Experience working within highly regulated or mission-critical ICT environments.Experience contributing to enterprise cyber resilience or security uplift programs.
Why Apply?This is an opportunity to work on nationally significant cyber security initiatives that directly support the resilience of Australia’s critical government systems.
You will join an experienced team delivering meaningful work within a complex enterprise environment, while gaining exposure to large-scale security assurance programs, governance initiatives and strategic cyber security projects.
If you are passionate about cyber governance, security assurance and strengthening organisational cyber resilience, we encourage you to apply.
Apply today or contact SkyDB for a confidential discussion.

📌 Senior Cyber Security GRC Specialist (Canberra)
🏢 SkyDB
📍 Canberra