Cyber Security GRC Professional

Cyber Security GRC Professional at C4i Solutions

C4i Solutions is a leading Technology, ICT, and Digital Solutions company seeking a Cyber Security GRC Professional to shape the future of Defence and Technology. We are looking for individuals who share our values, believe in our mission, and are passionate about making an impact. If you value teamwork, take pride in your work, and want to contribute to secure and compliant outcomes, we encourage you to apply.

About the Role

As a Cyber Security GRC Professional, you will be instrumental in delivering secure and compliant outcomes for Defence and government programs. This role requires strong expertise in ICT Assessment and Authorisation (A&A), risk management, and security assurance, with a deep understanding of frameworks such as ISM, PSPF, DSPF, and NIST. You will collaborate with stakeholders to provide risk-based cyber security advice, support accreditation activities, and ensure alignment between operational needs and regulatory obligations. Key responsibilities include developing security documentation, conducting risk assessments, and embedding governance practices to enhance cyber maturity and resilience. The ideal candidate will have experience in complex, mission-critical environments and possess the ability to influence stakeholders, drive compliance, and deliver practical security solutions within a fast-paced Defence context. This role is based in Adelaide.

Key Responsibilities

• Manage cyber security governance and compliance frameworks (ISM, PSPF, DSPF, Essential Eight) within the Defence Cyber Worthiness System (DCwS).
• Lead Cyber Security Assessment and Authorisation Framework (CSAAF) processes to achieve Authority to Operate (ATO).
• Engage with Defence stakeholders to support ATO workflows and outcomes.
• Develop and maintain core security artefacts (SAP, BIL, E8 assessments, SSP, SSP-A, SRMP, IRP, CMP, SCCG, POA&M).
• Drive continuous improvement in cyber security governance, policy development, and best practice implementation.
• Conduct risk management, including identification, mitigation, and reporting in Defence information environments.
• Operate within Defence networks and system security, including integration into the Single Information Environment and acceptance into service.

About You

• Australian citizen with a minimum AGSVA NV2 clearance.
• Bachelor's degree in Cyber Security, Information Technology, or related field (or equivalent experience).
• Relevant certification (CISSP, CISM, ISO27001-Lead Auditor, SANS 401) or IRAP qualification preferred.
• Minimum 5 years of experience in a Defence classified ICT environment.
• Willingness to participate in an on-call roster periodically.
• Strong analytical and reporting skills.
• Excellent communication and stakeholder engagement skills.
• Ability to work in high-pressure, secure ICT environments.

Why Join Us?

Veteran-Focused: As a Veteran-owned company, we support your transition and career growth through our Veteran Career Development Program. Defence Veterans are strongly encouraged to apply.

People First: We foster a culture of wellbeing, engagement, and respect, putting our people at the center.

A Culture That Values You: Join a passionate, supportive, and growing team that recognizes your contributions and rewards success. We work hard, support each other, and maintain a positive atmosphere.

Benefits We Offer

• Long Service Leave after 7 years.
• Annual Health & Wellbeing allowance ($250).
• 5 additional leave days in your first year.
• Birthday leave.
• Higher Education Subsidy ($2500 annually) for relevant qualifications.
• Veteran Career Development Program for seamless transition and support.
• Service Awards (1, 5, and 10 years).
• Employee Recognition for outstanding performance.
• Charitable donation matching up to $200.
• Plus, much more!

Be you, with us:

If you seek a workplace where your skills and dedication are valued, we invite you to join our close-knit team. We are a diverse group of professionals passionate about delivering impactful work for those who serve. If this sounds like your kind of team, apply now!

Key skills/competency

• Cyber Security GRC Professional
• ICT Assessment and Authorisation (A&A)
• Risk Management
• Security Assurance
• ISM Framework
• PSPF Framework
• DSPF Framework
• NIST Framework
• Defence Cyber Worthiness System (DCwS)
• Cyber Security Maturity