Governance, Risk and Compliance (GRC) Specialists

Bluerydge
Canberra ACT | Sydney NSW
Permanent, Full-Time Opportunities
Defence | Commonwealth Government | Critical Infrastructure

About Bluerydge

Bluerydge is an Australian-owned Defence and national security consultancy supporting Commonwealth agencies and industry with specialist cyber security, security and advisory capability.

We are currently growing our Governance, Risk and Compliance (GRC) team and are looking for experienced GRC professionals interested in joining Bluerydge on a permanent, full-time basis.

We are interested in candidates with experience across Government, Defence, critical infrastructure and other complex or highly regulated environments.

Rail industry experience is particularly desirable, with a current separate opportunity requiring relevant rail sector experience.

About the role

As a GRC Specialist, you will support the development and ongoing improvement of cyber security governance, risk management, assurance and compliance activities.

Depending on your experience and the engagement, your responsibilities may include:

- Developing, implementing and maintaining GRC frameworks, policies and procedures

- Supporting compliance with ISM, PSPF, ASD Essential Eight, ISO 27001 and NIST

- Conducting cyber security risk assessments, gap analyses and security audits

- Identifying vulnerabilities, control gaps and areas of non-compliance

- Developing and managing risk mitigation strategies

- Maintaining risk registers, incident management plans and compliance dashboards

- Supporting security incident response and regulatory risk management activities

- Preparing risk,



compliance and security governance reports for senior management and external auditors

- Facilitating cyber security awareness and compliance workshops

- Working closely with security architects, operations teams and other stakeholders to achieve security and compliance objectives

About you

We are looking for GRC professionals who bring strong cyber security governance knowledge, sound risk judgement and the ability to work effectively with technical and non-technical stakeholders.

You will ideally have:

- A Bachelor’s degree in Cybersecurity, Information Technology, Business or a related field

- Minimum 3 years’ experience in Governance, Risk and Compliance

- Experience within Government, Defence, critical infrastructure or other complex and regulated environments

- Strong knowledge of Australian cyber security regulations, standards and governance frameworks

- Demonstrated experience conducting risk assessments, internal audits and regulatory compliance reviews

- Strong working knowledge of ISO 27001, NIST, PSPF, ISM and ASD Essential Eight

- Experience developing or maintaining security policies, risk registers and compliance documentation

- Robust stakeholder engagement and communication skills

- Confidence working with senior stakeholders, security teams,



auditors and regulators

- Experience with GRC tools and risk management platforms

- Experience across rail, transport, energy, utilities, telecommunications or similar critical infrastructure environments will be highly regarded.

- Candidates with rail industry experience are particularly encouraged to apply, with a current separate requirement specifically seeking this background.

- Relevant certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Auditor/Implementer will also be highly regarded.

Why join Bluerydge?

This is an opportunity to join a growing cyber security team and contribute to meaningful security and risk outcomes across Defence, Government and critical infrastructure environments.

Bluerydge offers:

- Permanent, full-time employment

- Opportunities across Canberra and Sydney

- Exposure to complex Defence, Government and critical infrastructure environments

- Opportunities to work across a range of cyber security governance, risk and assurance activities

- Career development within a growing specialist cyber security team

- Competitive remuneration

- A professional and collaborative working environment

Important Information

Due to the nature of our work, applicants must:

- Be an Australian Citizen

- Hold a minimum NV1 Australian Government Security Clearance

Apply Now

If you are an experienced GRC professional looking to take the next step in your career, we’d love to hear from you.

Professionals with rail industry experience are particularly encouraged to apply.

Apply via SEEK or send your CV directly to ••••@bluerydge.com.

📌 Governance, Risk and Compliance (GRC) Specialists (Canberra)
🏢 Bluerydge
📍 Canberra