Job Description

Governance, Risk and Compliance (GRC) Specialists n

Governance, Risk and Compliance (GRC) Specialists

n

Bluerydge
n Canberra ACT | Sydney NSW
n Permanent, Full-Time Opportunities
n Defence | Commonwealth Government | Critical Infrastructure

n

About Bluerydge

n

Bluerydge is an Australian-owned Defence and national security consultancy supporting Commonwealth agencies and industry with specialist cyber security, security and advisory capability.

n

We are currently growing our Governance, Risk and Compliance (GRC) team and are looking for experienced GRC professionals interested in joining Bluerydge on a permanent, full time basis.

n

We are interested in candidates with experience across Government, Defence, critical infrastructure and other complex or highly regulated environments.

n

Rail industry experience is particularly desirable, with a current separate opportunity requiring relevant rail sector experience.

n

About the role

n

As a GRC Specialist, you will support the development and ongoing improvement of cyber security governance, risk management, assurance and compliance activities.

n

Depending on your experience and the engagement, your responsibilities may include:

n

Developing, implementing and maintaining GRC frameworks, policies and procedures

n

Supporting compliance with ISM, PSPF, ASD Essential Eight, ISO 27001 and NIST

n

Conducting cyber security risk assessments, gap analyses and security audits

n

Identifying vulnerabilities, control gaps and areas of non-compliance

n

Developing and managing risk mitigation strategies

n

Maintaining risk registers, incident management plans and compliance dashboards

n





Supporting security incident response and regulatory risk management activities

n

Preparing risk, compliance and security governance reports for senior management and external auditors

n

Facilitating cyber security awareness and compliance workshops

n

Working closely with security architects, operations teams and other stakeholders to achieve security and compliance objectives

n

About you

n

We are looking for GRC professionals who bring strong cyber security governance knowledge, sound risk judgement and the ability to work effectively with technical and non-technical stakeholders.

n

You will ideally have:

n

A Bachelor’s degree in Cybersecurity, Information Technology, Business or a related field

n

Minimum 3 years’ experience in Governance, Risk and Compliance

n

Experience within Government, Defence, critical infrastructure or other complex and regulated environments

n

Strong knowledge of Australian cyber security regulations, standards and governance frameworks

n

Demonstrated experience conducting risk assessments, internal audits and regulatory compliance reviews

n

Strong working knowledge of ISO 27001, NIST, PSPF, ISM and ASD Essential Eight

n

Experience developing or maintaining security policies, risk registers and compliance documentation

n





Strong stakeholder engagement and communication skills

n

Confidence working with senior stakeholders, security teams, auditors and regulators

n

Experience with GRC tools and risk management platforms

n

Experience across rail, transport, energy, utilities, telecommunications or similar critical infrastructure environments will be highly regarded.

n

Candidates with rail industry experience are particularly encouraged to apply, with a current separate requirement specifically seeking this background.

n

Relevant certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Auditor/Implementer will also be highly regarded.

n

This is an opportunity to join a growing cyber security team and contribute to meaningful security and risk outcomes across Defence, Government and critical infrastructure environments.

n

Bluerydge offers:

n

Opportunities across Canberra and Sydney

n

Exposure to complex Defence, Government and critical infrastructure environments

n

Opportunities to work across a range of cyber security governance, risk and assurance activities

n

Career development within a growing specialist cyber security team

n

Competitive remuneration

n

A professional and collaborative working environment

n

Due to the nature of our work, applicants must:

n

Be an Australian Citizen

n

Hold a minimum NV1 Australian Government Security Clearance

n

If you are an experienced GRC professional looking to take the next step in your career, we’d love to hear from you.

n

Professionals with rail industry experience are particularly encouraged to apply.

n

#J-18808-Ljbffr

📌 Governance, Risk and Compliance (GRC) Specialists (Canberra)
🏢 Bluerydge
📍 Canberra