At a Glance
- Tasks: Lead security authorisation and drive cyber maturity in a dynamic environment.
- Company: Join a respected organisation in the Government & Defence sector.
- Benefits: Permanent role with long-term stability and growth opportunities.
- Other info: Canberra-based candidates only; diverse backgrounds encouraged to apply.
- Why this job: Make a real impact on national security while mentoring a talented team.
- Qualifications: 7+ years in cyber security/GRC and Australian Citizenship required.
The predicted salary is between 98550 - 120450 $ per year.
Cyber GRC Manager (PV Cleared) — Canberra (On-site 5 days per week) | Permanent
Want to lead Authority to Operate (ATO) outcomes and lift cyber maturity in an environment where security actually matters?
Would you like to grow a team of 4 GRC Analysts to 7 and be part of a growing workplace?
We are partnering with a highly regarded organisation in the Government & Defence sector to recruit a Cyber GRC Manager in Canberra.
This is a permanent, on-site role working closely with senior cyber leadership, driving governance, risk, compliance and security authorisation across complex systems.
- Why you’ll want this role
- High-impact work: Own and lead security authorisation activities supporting Government ATO processes.
- Leadership & influence: Report into senior cyber leadership and guide a dedicated GRC function (direct report included).
- Maturity uplift focus: Drive implementation and continuous improvement aligned to Government security frameworks.
- Variety: Influence greenfield initiatives and modernisation of legacy systems.
- Growth: Strong emphasis on mentoring and self-directed learning in a small, capable cyber team.
- Permanent opportunity: Long-term stability in a highly regulated environment.
- Role (what you’ll be doing)
- Owning security authorisation documentation (e. g., System Security Plans, Security Risk Management Plans, Cyber Incident Response Plans) for ATO.
- Leading implementation and uplift across frameworks/standards such as ISM, PSPF, ASD Essential Eight, NIST (and similar).
- Running and leading cyber security risk assessments, with pragmatic risk treatment strategies.
- Acting as a trusted SME across stakeholders with varying technical depth, including executive-level briefings.
- Partnering with IT and delivery teams to embed security into infrastructure, projects, and enterprise applications.
- What you’ll bring
- Australian Citizenship (and eligible to maintain PV clearance requirements)
- AGSVA Positive Vetting clearance (Current, active or recently deactivated within the past 2 months)
- Strong experience in cyber security / GRC (typically 7+ years in cyber/GRC-focused roles)
- Solid working knowledge of PSPF, ISM, ASD Essential Eight (and/or NIST)
- Proven stakeholder management across a complex, regulated environment
- Nice-to-haves
- Exposure to ISO 27000 series, NIST 800 series, CIS controls, etc.
If you are a passionate experienced GRC Analyst looking to be a leader or an experienced GRC Manager, we encourage you to apply today via the link provided!
Please note Canberra-based candidates with full time work rights or people already willing to relocate only will be considered for this role as it is a requirement for this position and no sponsorship is on offer.
Candidates from all backgrounds are welcome to apply too. Please feel free to also send a CV to , our Principal IT Consultant for Data, AI and Cyber, thanks.
#J-18808-Ljbffr
Cyber GRC Manager in Canberra employer: Sirius.
Sirius. is an exceptional employer that prioritises innovation and collaboration, making it a fantastic place for a Digital Product Manager to thrive. With a strong commitment to employee growth, we offer comprehensive training and development opportunities, alongside a supportive work culture that values diversity and inclusion. Located in Australia, our team enjoys the unique advantage of working on a platform that directly impacts food safety and environmental standards, contributing to meaningful change in the industry.
