Governance, Risk, and Compliance Specialist, AWS Security

G'day! You've found an opportunity that could define your next chapter.

Applicants must be Australian citizens and hold or be eligible to obtain an Australian Government Security Clearance with the ability to successfully complete an Organisational Suitability Assessment. More information regarding security clearances can be found at Mission - Why This Program, Why Now?

You're joining at the defining moment of one of the most significant technology programmes Australia has ever undertaken. This programme will build and operate the dedicated cloud giving Australia's national security community and its allies the capability to see more, share more, innovate and act faster than ever before.

The architectural decisions being made now - how we structure networking, implement security controls, and automate at scale - will shape how Australia's national security community operates for the next decade. You won't be inheriting someone else's design choices. You'll be making them.

Your Opportunity
Imagine being the person who stands at the intersection of sovereign cloud innovation and the security frameworks that protect a nation. As a Governance, Risk, and Compliance (GRC) Specialist within AWS Security, you won't just be ticking boxes - you'll be the driving force behind the certification, accreditation, and authorisation activities that give Australia's national security community the confidence to operate at the speed of mission.

This role puts you in the room where it happens. You'll implement ISM, PSPF, DSPF, ASIO T4, and NIST frameworks into real-world cloud architectures - not as an afterthought, but as foundational design decisions. You'll collaborate with internal teams and customers to establish security baselines, define control objectives, and shape the security posture of a capability that will serve Australia for decades.

You'll bring your domain expertise to bear as a thought leader, developing material on cloud and emerging technologies that positions the organisation at the forefront of the industry. You'll exercise sound judgement in navigating the tension between short-term delivery and long-term security goals, demonstrating the resilience and composure needed to achieve excellent outcomes in complex environments.





The team you're joining is exceptional - security professionals drawn from both national security and private sector backgrounds, united by diversity of thought, creativity, and a relentless bias for action. Here, there are no "perfect" security solutions. There's continuous improvement, creative problem-solving, and the satisfaction of building something that genuinely matters.

Key job responsibilities
You'll be the GRC engine for designated physical and logical components within the cloud capability – owning assurance and authorisation activities end-to-end and ensuring every element adheres to the standards and protocols that underpin national trust.

Your work begins at the design table. You'll collaborate with internal teams and customers to establish security baselines, level-set requirements, and define the control objectives that shape how the capability is built. When ISM, PSPF, DSPF, ASIO T4, or NIST frameworks need to be woven into architecture, you'll be the one translating regulatory intent into engineering reality.

You'll create, optimise, and champion cross-functional working groups that drive security efficiency across the organisation. These aren't bureaucratic committees – they're high-performing teams solving real problems at pace, and you'll be the catalyst that keeps them focused and effective.

Deadlines will be tight and the stakes will be high. You'll deliver with exceptional attention to detail, ensuring accuracy across every aspect of security management while maintaining the momentum the programme demands.

As a day-to-day mentor and advisor to teams across AWS, you'll elevate the security capability of the broader organisation, building a culture of security excellence.

About the team
Amazon security is central to maintaining customer trust and delivering delightful customer experiences. Our organisation ensures a high bar for security across all products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas, including cloud, devices, retail,



entertainment, healthcare, operations, and physical stores.

Benefits
- Learning & development – AWS training and certification support, access to internal learning platforms.
- Health, income protection and life cover – Amazon subsidises private health insurance premiums, and group salary continuance and life insurance are included at no cost to you.
- Military differential pay launching in Australia – Australian employees taking defence reserve leave may receive up to 52 weeks of military differential pay to help cover the difference in pay while serving.
- Employee Assistance Program – Free, confidential support 24 hours a day, 7 days a week for you and your family – mental health, financial coaching, legal questions, and everyday life events.
- Family-building benefit – Access to Maven for fertility treatment, adoption support, surrogacy, and parenting coaching.
- Amazon Extras & employee discount – cashback and discounts across hundreds of retail, fitness, travel, and lifestyle partners.

Basic Qualifications
- 4+ years experience working in areas related to security assurance, such as cybersecurity, auditing, security architecture, regulatory affairs or public sector agencies involved in cybersecurity management.
- Experience working with governance, risk and compliance programs that directly involve interaction with regulatory bodies.
- Proficient with government security frameworks, policies and standards (e.g. PSPF, ISM, DSPF. ASD Essential Eight).
- Experience working with cloud technologies.

Preferred Qualifications
- Degree or equivalent experience in (Computer Science, Engineering, Cyber Security, IT Security Management, Security Risk Management) a related security field.
- Minimum 4 years experience in implementing and operationalising security to meet business outcomes.
- Proven ability to not only influence but lead business partners and supporting teams.
- Ability to credibly coordinate between technical teams and business stakeholders.
- Strong communication skills. Ability to produce detailed and complex written business cases without the use of PowerPoint.

IDE statement:
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

📌 Grc Analyst - Ai & Ot (Melbourne)
🏢 Kmart Australia
📍 Melbourne