Product Security GRC Specialist Engineering I Aus

Secure the technology that protects those who matter

Silentium Defence is developing world-leading passive radar and advanced sensing technology supporting Defence, nationalsecurityand critical infrastructure.As our products and engineering capability continue to grow, we are looking for an experiencedProduct Security GRC Specialisttostrengthen the security, resilience and compliance of our products and development environments.

This is a hands-on security governance role sitting at the intersection ofcyber security,engineeringand Defence assurance. You will work closely with multidisciplinary engineering teams to embed security throughout the product lifecycle, manage Governance, Risk and Compliance activities, and help ensure our products meet Australian Government,Defenceand industry security requirements.

If you enjoy translating complex security frameworks into practical engineering outcomes and want to contribute to technology with genuine national security impact, this could be your next chance.

As our Product Security GRC Specialist, you will take ownership of key product security assurance and compliance activities across our technology portfolio.

You will support products through Assessment and Authorisation activities,maintainaudit-ready security artefacts, help engineering teams implementappropriate controls, and ensuresecurityremainsembedded throughout the Secure Development Lifecycle.

You will also playan important roleinidentifyingemerging security risks, managingvulnerabilitiesand continuously improving secure engineering practices across Silentium Defence.

WhatYou’llBe Doing





- Develop andmaintainproduct security documentation including security policies, procedures, riskassessmentsand System Security Plans.
- ManageAssessment and Authorisation (A&A;)activities and associated product security artefacts.
- Maintain security documentation andevidenceto support Defence assurance andIRAP assessment readiness.
- Interpret and apply applicable controls from the Australian GovernmentInformation Security Manual (ISM)and relevant industry frameworks including theNIST Cybersecurity Framework.
- Monitor product architectures and security controls to ensure ongoing compliance with regulatory,legislativeand contractual requirements.
- Integrate security controls,processesand testing throughout theSecure Software Development Lifecycle (SDLC).
- Assess existing software development practices andidentifyopportunities to strengthen security and compliance.
- Manage vulnerability remediation activities and support product security incident response and forensic investigations whenrequired.
- Support Linux system security, operating systemhardeningand application security practices.
- Work with engineering teams to strengthenDevSecOpspractices including CI pipelines, Infrastructure-as-Codeand early vulnerability identification.
- Contribute to supplier and supply-chain assurance activities, including supplier security evaluations,



SBOM reviews and third-partycomponentintegrity.
- Provideinformed advice to stakeholders regarding emerging cyber threats, securitytechnologiesand Defence ICT security developments.
- Continuously improve security governance, engineering practices,toolsand standards.

About You

You are an experienced cyber security professional who understands that successful security is not simply about applying controls — it is about working with engineering teams to deliver secure,compliantand practical products.

You can confidently interpret security frameworks and translate requirements into actions that engineers, project teams and business stakeholders can understand and implement.

You are comfortable working across technical and governance environments and can balance cyber risk, compliance obligations, engineeringconstraintsand business priorities.

You will bring:

- Approximately5+ years’ experience in cyber security, including at least two years focused on security engineering.
- Experience supporting Governance, Risk and Compliance activities within technical or engineering environments.
- Working knowledge of the Australian GovernmentISMand familiarity with Defence security requirements.
- Awareness and practical understanding of theNIST Cybersecurity Framework.
- Experience developing security documentation, riskassessmentsand audit evidence.
- Understanding of secure software development and SDLC principles.
- Familiarity with Linux security and hardening practices.
- Understanding ofDevSecOpspractices and security within CI/CD environments.
- Exposure to scripting or software d

📌 Product Security GRC Specialist (Australia)
🏢 Silentium Defence
📍 Australia