Cyber Defence GRC Analyst Role
This is a critical position within the Defence sector, requiring an experienced professional to provide support for compliance, uplift activities, and assurance across cyber governance, risk, and control frameworks.
* Key Responsibilities:
* Conduct thorough assessments against the Essential Eight Framework and provide actionable recommendations for improvement
* Gather, validate, and prepare relevant evidence for internal and external audits
* Facilitate remediation activities arising from audit findings, assessments, and identified risks
* Support compliance activities related to the ASCS Information Security Manual (ISM)
* Collaborate with internal stakeholders to ensure alignment with DISP and DSPF requirements
* Contribute to cyber assurance, governance documentation, and continuous improvement initiatives
* Requirements:
* Hold baseline security clearance (minimum) — must be active
* Demonstrate strong knowledge of:
o Essential Eight Maturity Model
o ASCS ISM
o DISP and DSPF frameworks
* Possess experience supporting cyber governance, risk, assurance, or compliance activities
* Excel in documentation and evidence-gathering skills
* Demonstrate ability to work effectively within Defence or other highly regulated environments
* Show strong stakeholder engagement and coordination capability