Job Details
  • Reference393669A_1654660419
  • LocationCanberra
  • Job TypeContract
  • Posted28 days ago
  • ConsultantLeanne Porter

As one of the Australia's largest providers of human resources solutions, Chandler Macleod has a proven track record of unleashing potential in people and companies. For over 40 years Chandler Macleod's recruitment business has connected leading-edge projects and employers with outstanding business professionals.

Our Federal Government client is seeking to engage a Assistant Director, Governance Risk and Compliance on a contract for 12 months with potential extension.

About the Role:

The Asst. Director, GRC role is responsible for leading a team in the development, delivery and management of ICT governance in OCIO. The position will support ICT Risk identification, assessment and management on behalf of the Chief Security Officer and identify methods of compliance for ICT Governance in OCIO. This role is crucial maintaining the security and integrity of information and systems in OCIO.


  • Develop and participate in implementation of client initiatives focused on the reduction of technology risk, governance and compliance to policies and external regulatory compliance
  • Evaluating business and IT risks
  • Developing IT security standards, policy, procedures, and controls to manage risks. Improve client's security positioning through process improvement, policy, automation, and the continuous evolution of capabilities.
  • Evaluation information security threats and their impact clients IT environment
  • Lead the analysis of requirements and design of clients' information security posture, as well as Legal, Regulatory and Scheme security requirements.
  • Supporting the business in delivery of work streams for clients in compliance standards such as the PSPF, ISM, Agency Risk Management Frameworks and incident management disciplines.
  • Performing and investigating internal and external information security risk and exceptions assessments.
  • Documenting and reporting control failures and gaps to stakeholders. Provides remediation guidance and prepares management reports to track remediation activities.
  • Staying current on best practices and technological advancements and acts as a technical resource for security assessment and regulatory compliance.
  • Performing other related duties as assigned from time to time based on the business requirements

Essential Criteria

  • 3- 5 years' experience in IT Governance, Risk & Compliance
  • Understanding of International and Australian GRC standards related to ICT preferred
  • Experience of risk management principles and associated methodologies
  • Ideally will have a CEH, CISSP, CISA or CISM qualification
  • Proven ability to make sound pragmatic decisions and judgements under tight timelines.
  • Strong interpersonal and influencing skills with the ability to influence and drive change in a collaborative way both internally and externally.

If you feel you are a suitable candidate submit your application by hitting "Apply for this job". Alternatively, you can call Leanne Porter on 02 6268 9926 or email for further discussion.