Senior Cyber GRC Consultant We're a 'Family Friendly' certified workplace – we understand the often many and varied roles our team members need to play within their own unique family setting and actively support them.
Our team feel Leidos is a great place to work.
Learn more about our culture and advantages by visiting us here Do Work That Matters Leidos Australia delivers IT and airborne solutions that protect and advance the Australian way of life.
Our **** local experts, backed by our global experience and network of partners, are working to solve the world's toughest challenges in government, intelligence, defence, aviation, border protection and health markets.
Your New Role and Responsibilities Within Leidos Central Processing (CP) Security, the Senior Cyber Security GRC Consultant supports the governance, risk, and compliance domains within the cybersecurity program, supporting the CP Environment.
This role is responsible for supporting enterprise-wide efforts to ensure compliance with regulatory requirements, internal policies, and industry best practices.
The role combines technical knowledge, strategic thinking, and regulatory awareness to mature the security posture and risk management capabilities of a complex strategic environment.
What You'll Bring to Make an Impact Develop, implement, and maintain cybersecurity policies and standards aligned with frameworks (e.g., NIST CSF, ISO/IEC *****, DSPF, ISM) and prepare security assessment documentation for system authorisations.
Conduct and support risk assessments across systems and vendors, track remediation efforts, and coordinate audits to ensure compliance with regulatory and internal requirements.
Review and assess third-party vendors for security risks, provide mitigation strategies, and support due diligence processes.
Deliver security awareness programs, develop targeted training,



and report GRC metrics and KPIs through dashboards and documentation for leadership and working groups.
Act as a trusted advisor, mentor junior team members, and identify opportunities for automation and strategic enhancements to mature the GRC function.
About You and What You'll Bring Ideally, you will have 7–10 years of proven Cyber GRC experience; however, candidates with around five years of direct, hands-on experience in Defence or similarly regulated Government System Assessment and documentation activities may be highly regarded as strong applicants.
"on experience in Defence or similarly regulated Government System Assessment and documentation activities may be Strong understanding of cybersecurity standards, regulations, and risk frameworks, plus experience in Defence environments and the Cyber Security Assessment and Authorisation Framework.
Excellent written and verbal communication (including executive-level reporting), strong analytical and problem-solving skills, and ability to work independently to deliver outcomes.
Certifications such as CISSP, CISA, CISM, CRISC, CGEIT, ISO ***** Lead Implementer/Auditor, or IRAP highly regarded; experience in regulated sectors (Defence, finance, healthcare, energy, government) desirable.
Strategic thinking, risk-based decision-making, project management capability, regulatory acumen, and technical understanding of cybersecurity controls.
Diverse Team Members, Shared Values and a Common Purpose Leidos Australia is an equal opportunities organisation and is committed to creating a truly inclusive workplace.
We welcome and encourage applications from Aboriginal and Torres Strait Islanders, culturally and linguistically diverse people, people with disabilities, veterans, neurodiverse people, and people of all genders, sexualities, and age groups.
Our five Advocacy Groups (Women and Allies Network, Young Professionals, Defence

📌 Senior Cyber Security Grc Consultant (Brisbane)
🏢 00160 Leidos Australia
📍 Brisbane