Governance, Risk and Compliance (GRC) Specialists
Bluerydge · Canberra ACT ·
- Work mode
- Onsite
- Employment
- Full time
- Category
- Security
- Experience
- 3+ years
- Visa sponsorship
- No
- Salary
- AUD 140,000 – 175,000 / year
Bluerydge · Canberra ACT ·
CAE · Homebush
Softtest pays pty ltd · Canberra, ACT, Australia
Yira Yarkiny Security Services · Ascot, Perth WA
anglicare · Anglicare Hub Macquarie Park
Thales · Rydalmere
The GRC Specialist will develop and maintain cyber security governance frameworks, conduct risk assessments, and ensure compliance with standards like ISM, PSPF, and ISO 27001 for Defence and government clients. This role requires strong stakeholder management and experience in highly regulated environments.
Salary: $140,000 – $175,000 per year
Governance, Risk and Compliance (GRC) Specialists
Bluerydge
Canberra ACT | Sydney NSW
Permanent, Full-Time Opportunities
Defence | Commonwealth Government | Critical Infrastructure
About Bluerydge
Bluerydge is an Australian-owned Defence and national security consultancy supporting Commonwealth agencies and industry with specialist cyber security, security and advisory capability.
We are currently growing our Governance, Risk and Compliance (GRC) team and are looking for experienced GRC professionals interested in joining Bluerydge on a permanent, full-time basis.
We are interested in candidates with experience across Government, Defence, critical infrastructure and other complex or highly regulated environments.
Rail industry experience is particularly desirable, with a current separate opportunity requiring relevant rail sector experience.
About the role
As a GRC Specialist, you will support the development and ongoing improvement of cyber security governance, risk management, assurance and compliance activities.
Depending on your experience and the engagement, your responsibilities may include:
Developing, implementing and maintaining GRC frameworks, policies and procedures
Supporting compliance with ISM, PSPF, ASD Essential Eight, ISO 27001 and NIST
Conducting cyber security risk assessments, gap analyses and security audits
Identifying vulnerabilities, control gaps and areas of non-compliance
Developing and managing risk mitigation strategies
Maintaining risk registers, incident management plans and compliance dashboards
Supporting security incident response and regulatory risk management activities
Preparing risk, compliance and security governance reports for senior management and external auditors
Facilitating cyber security awareness and compliance workshops
Working closely with security architects, operations teams and other stakeholders to achieve security and compliance objectives
About you
We are looking for GRC professionals who bring strong cyber security governance knowledge, sound risk judgement and the ability to work effectively with technical and non-technical stakeholders.
You will ideally have:
A Bachelor’s degree in Cybersecurity, Information Technology, Business or a related field
Minimum 3 years’ experience in Governance, Risk and Compliance
Experience within Government, Defence, critical infrastructure or other complex and regulated environments
Strong knowledge of Australian cyber security regulations, standards and governance frameworks
Demonstrated experience conducting risk assessments, internal audits and regulatory compliance reviews
Strong working knowledge of ISO 27001, NIST, PSPF, ISM and ASD Essential Eight
Experience developing or maintaining security policies, risk registers and compliance documentation
Strong stakeholder engagement and communication skills
Confidence working with senior stakeholders, security teams, auditors and regulators
Experience with GRC tools and risk management platforms
Experience across rail, transport, energy, utilities, telecommunications or similar critical infrastructure environments will be highly regarded.
Candidates with rail industry experience are particularly encouraged to apply, with a current separate requirement specifically seeking this background.
Relevant certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Auditor/Implementer will also be highly regarded.
Why join Bluerydge?
This is an opportunity to join a growing cyber security team and contribute to meaningful security and risk outcomes across Defence, Government and critical infrastructure environments.
Bluerydge offers:
Permanent, full-time employment
Opportunities across Canberra and Sydney
Exposure to complex Defence, Government and critical infrastructure environments
Opportunities to work across a range of cyber security governance, risk and assurance activities
Career development within a growing specialist cyber security team
Competitive remuneration
A professional and collaborative working environment
Important Information
Due to the nature of our work, applicants must:
Be an Australian Citizen
Hold a minimum NV1 Australian Government Security Clearance
Apply Now
If you are an experienced GRC professional looking to take the next step in your career, we’d love to hear from you.
Professionals with rail industry experience are particularly encouraged to apply.
Apply via SEEK or send your CV directly to [email protected].