_{20th April, 2026}

About CyberCX

CyberCX is the leading independent cyber security services organisation in Australia and New Zealand. We bring together the region’s most trusted cyber security companies to deliver end-to-end services to enterprise and government.

With 1400+ cyber security professionals across Australia, New Zealand, the UK and the US, we offer unmatched capability, deep expertise, and the opportunity to do meaningful work that helps secure our communities.

About the Role

Our Governance, Risk & Compliance (GRC) practice is growing rapidly, and we’re looking for experienced, customer-obsessed professionals who want to deliver meaningful cyber security outcomes.

The Manager - GRC has a strong understanding of all major cyber security domains, with a specific focus on supporting the Defence industry and related projects.  This role requires deep theoretical understanding within Governance, Risk and Compliance to deliver within a complex environment supporting national defence capability. 

What You'll Do

You will provide direction, mentoring and quality control to consultants as part of engagement teams, and you will build client trust by communicating with influence, demonstrating excellence in planning and execution, and applying deep security and Defence industry knowledge.

What You’ll Bring

• 3+ years in a consulting, security architect or operations role supporting cyber security of organisational projects.

• Experience with the Defence systems engineering lifecycle and developing supporting cyber security artefacts.

• Detailed understanding of Australian Government and Defence security frameworks, including ISM, PSPF and DSPF.

• Experience undertaking risk assessments and system threat modelling.

• Existing security governance certifications are desirable but not essential (CISM or CISSP).

• Experience with network infrastructure, architecture, or engineering. Associated certifications are desirable but not required (CCNA, CCNA Security, CCNP).

• Experience supporting IRAP assessments either in execution or as part of preparation, or a desire to become an IRAP assessor is highly appreciated.

A Defence security clearance is required for this role - applicants must be Australian citizens and eligible to obtain and maintain an NV1 clearance. 

ITAR regulations are applicable and as such your nationality may be a factor in determining your suitability for this role.

Why CyberCX

• Flexible hybrid working – balance your time between home and office.
• Retail & lifestyle discounts through our corporate partners.
• Unmatched career development within Australia and New Zealand’s largest cyber community.
• Impactful consulting work across diverse industries, helping clients strengthen their security posture in a rapidly evolving cyber landscape.

We kindly request no agency submissions for this role.  Unsolicited CV’s will not be accepted, and no fees will be payable.

Apply For Job