GRC Specialist

About the Company

Downer Professional Services comprises of three business units our Technical, Advisory, and Capability consulting practice, and Team Downer, which partners with CASG and NSSG as a major service provider to Defence. Together, we are a multi-disciplinary advisory and delivery partner of choice for clients across Defence and National Security.

We currently have an opportunity for a GRC Specialist in Canberra to work on Digital projects**.

About the Role

Join our Downer Professional Services team and play a key role in delivering complex defence and national security projects that safeguard Australia’s future.

Key Responsibilities

• Strong governance and documentation expertise, with the ability to review, uplift, rationalise, and standardise cyber security documentation for clarity, consistency, and audit readiness
• Proficiency in developing and maintaining core security artefacts, including SSPs, Security Risk Assessments, Risk Treatment Plans, SOPs, control mappings (Essential Eight, ISM, NIST), and accreditation support documentation.
• Solid risk and compliance capability, including identifying and analysing cyber risks, supporting compliance against ISM/PSPF/Essential Eight, and assisting with assurance and security assessments.
• Effective stakeholder engagement and communication skills, able to collaborate with ICT teams, project managers, security advisors, and coalition partners, and translate technical concepts for non‑technical and senior audiences.
• Continuous improvement mindset, with the ability to identify documentation gaps, streamline templates and standards, and uplift overall security documentation practices across the project.

About You / Requirements

• Demonstrated Cyber Security GRC experience, with strong capability in documentation uplift, quality improvement, and producing structured, auditable security artefacts.
• Practical knowledge of Australian Government cyber frameworks, including ISM, PSPF, and the Essential Eight, with the ability to apply them in complex environments.
• Experience working in multi‑stakeholder or coalition environments, supporting projects that require coordination across agencies, partners, or international participants.
• Strong written and verbal communication skills, able to translate technical security concepts for non‑technical audiences and build effective stakeholder relationships.
• Ability to engage confidently with technical and non‑technical stakeholders, ensuring clarity, alignment, and effective collaboration across security, ICT, and governance teams. -Due to the nature of the work, you are required to currently hold and maintain an AGSVA Security clearance as required by the Commonwealth. In some instances, compliance with International Traffic in Arms Regulations (ITAR) requirements may also be an inherent requirement.

Qualifications & Certifications

• AGSVA Security Clearance (required)
• ITAR compliance may be inherent requirement

What's On Offer / Benefits

• Meaningful work: Help to deliver critical Defence projects that protect Australia and shape its future.
• Professional development: Access career mapping, accelerated learning programs, and shared learning through our Communities of Practice.
• Great perks: Enjoy discounts on healthcare, retail, vehicles, and more through Perks@Downer.
• Veteran support: Benefit from initiatives like up to 20 days of Reservist Leave to stay connected post-service.
• WORK180 Endorsed Employer: we support flexibility that works for your life, inclusive leadership that values your voice, and equitable access to opportunity so you can do your best work and bring your whole self to it.
• If you need support or adjustments through the recruitment process, just let us know, we’re here to help you put your best foot forward.

How to Apply

• You want your work to matter and so do we. If it feels like the right fit, apply - potential counts, and so do you.