Product Security GRC Specialist

Product Security GRC Specialist Engineering I Aus

Secure the technology that protects those who matter

Silentium Defence is developing world-leading passive radar and advanced sensing technology supporting Defence, nationalsecurityand critical infrastructure.As our products and engineering capability continue to grow, we are looking for an experiencedProduct Security GRC Specialisttostrengthen the security, resilience and compliance of our products and development environments.

This is a hands-on security governance role sitting at the intersection ofcyber security,engineeringand Defence assurance. You will work closely with multidisciplinary engineering teams to embed security throughout the product lifecycle, manage Governance, Risk and Compliance activities, and help ensure our products meet Australian Government,Defenceand industry security requirements.

If you enjoy translating complex security frameworks into practical engineering outcomes and want to contribute to technology with genuine national security impact, this could be your next opportunity.

As our Product Security GRC Specialist, you will take ownership of key product security assurance and compliance activities across our technology portfolio.

You will support products through Assessment and Authorisation activities,maintainaudit-ready security artefacts, help engineering teams implementappropriate controls, and ensuresecurityremainsembedded throughout the Secure Development Lifecycle.

You will also playan important roleinidentifyingemerging security risks, managingvulnerabilitiesand continuously improving secure engineering practices across Silentium Defence.

WhatYou'llBe Doing

• Develop andmaintainproduct security documentation including security policies, procedures, riskassessmentsand System Security Plans.
• ManageAssessment and Authorisation (A&A)activities and associated product security artefacts.
• Maintain security documentation andevidenceto support Defence assurance andIRAP assessment readiness.
• Interpret and apply applicable controls from the Australian GovernmentInformation Security Manual (ISM)and relevant industry frameworks including theNIST Cybersecurity Framework.
• Monitor product architectures and security controls to ensure ongoing compliance with regulatory,legislativeand contractual requirements.
• Integrate security controls,processesand testing throughout theSecure Software Development Lifecycle (SDLC).
• Assess existing software development practices andidentifyopportunities to strengthen security and compliance.
• Manage vulnerability remediation activities and support product security incident response and forensic investigations whenrequired.
• Support Linux system security, operating systemhardeningand application security practices.
• Work with engineering teams to strengthenDevSecOpspractices including CI pipelines, Infrastructure-as-Codeand early vulnerability identification.
• Contribute to supplier and supply-chain assurance activities, including supplier security evaluations, SBOM reviews and third-partycomponentintegrity.
• Provideinformed advice to stakeholders regarding emerging cyber threats, securitytechnologiesand Defence ICT security developments.
• Continuously improve security governance, engineering practices,toolsand standards.

About You

You are an experienced cyber security professional who understands that successful security is not simply about applying controls - it is about working with engineering teams to deliver secure,compliantand practical products.

You can confidently interpret security frameworks and translate requirements into actions that engineers, project teams and business stakeholders can understand and implement.

You are comfortable working across technical and governance environments and can balance cyber risk, compliance obligations, engineeringconstraintsand business priorities.

You will bring:

• Approximately5+ years' experience in cyber security, including at least two years focused on security engineering.
• Experience supporting Governance, Risk and Compliance activities within technical or engineering environments.
• Working knowledge of the Australian GovernmentISMand familiarity with Defence security requirements.
• Awareness and practical understanding of theNIST Cybersecurity Framework.
• Experience developing security documentation, riskassessmentsand audit evidence.
• Understanding of secure software development and SDLC principles.
• Familiarity with Linux security and hardening practices.
• Understanding ofDevSecOpspractices and security within CI/CD environments.
• Exposure to scripting or software development languages such as Bash, Python or C++.
• Strong stakeholder engagement skills and the ability to influence both technical and non-technical audiences.

Qualifications & Security Requirements

To be considered for this opportunity you will require:

• Eligibility to obtain andmaintainan Australian GovernmentNV1 security clearance or higher.
• Bachelor's degree or equivalent qualification in Cybersecurity, Computer Science,Engineeringor a related discipline.
• Security+ or Certified in Cybersecurity (CC), or equivalent relevant certification.

Highly regarded certifications include:

• Certified in Governance, Risk and Compliance (CGRC)
• Certified Information Systems Security Professional (CISSP)
• Information Systems Security Engineering Professional (ISSEP)
• Certified Secure Software Lifecycle Professional (CSSLP)
• Certified Information Systems Auditor (CISA)

Why Silentium Defence?

At Silentium Defence, you will be working alongside talented engineers and specialists developing technology with real-world Defence and national security applications.

You will have the opportunity to influence how security is incorporated into our products from design through development,deploymentand sustainment - rather than simply assessing security after the fact.

This is an opportunity to take meaningful ownership, work across diverse technical challenges and help shape secure engineering practices as our organisation continues to grow.

If you are passionate about product security, Defence cyber assurance and building security into technology from the beginning, we would love to hear from you.

We Are Innovators, problem solvers, and leaders in our field, dedicated to making a real impact on a global

Silentium Defence is a rapidly growing, Australian-born business working at the cutting edge of advanced technology capability.

Our world-leading passive radar sensors empower defence, space, and commercial customers to see without being seen, enabling them to protect what matters most with unparalleled precision and reliability.

Why work with us

We're doing hard things. Each and every one of us is empowered with responsibility and plays an integral role in the growth of our business. Here, hard work translates into real-world impact, and every contribution counts.

But it's not all work-our culture is built on celebrating achievements, supporting one another, and providing opportunities to explore everyone's full potential.