Triton Cybersecurity GRC Lead - Northrop Grumman

Description

We are Northrop Grumman Australia (NGA). Our 800 strong team is leveraging unparalleled global resources to deliver sovereign Defence capability aligned to the Government’s priorities across Aeronautics, Mission Critical Systems, Space and Guided Weapons. As we build our business and our capabilities, we are also developing a reputation as a great place to work. Help us define what is possible for our nation and for your career.

The Role:

The MQ-4C (Triton Unmanned Aircraft System) team in Edinburgh (SA) is expanding.

Northrop Grumman Australia is seeking a Cyber Security GRC Lead to take ownership of the governance, risk and authorisation activities underpinning one of Australia's most advanced Defence capabilities.

Triton is a first-of-type ISR platform for the ADF, operating across complex systems and classifications. Cybersecurity isn't a tick-box exercise, it needs to be clearly defined, documented, justified and maintained throughout the system lifecycle.

This role sits at the centre of that process. You'll lead the development and maturity of the security artefacts, assessments and governance activities that support Authorisation to Operate (ATO), helping ensure Triton systems remain secure, compliant and trusted.

You'll inherit a solid foundation with established frameworks, templates and artefacts already in place. The opportunity is to take ownership, uplift their maturity, and help shape a professional suite of security documentation that supports the Triton program.

This role is Adelaide-based (RAAF Edinburgh). Australian Citizenship and an NV1 clearance are required to be considered.

Key Responsibilities

You'll lead how cyber risk is assessed, documented and managed, ensuring Triton systems maintain their ATO and continue to meet Defence security requirements.

• Own and mature the security artefacts supporting Assessment & Authorisation activities, including SSPs, SRMPs and PoAMs
• Lead system approvals, re-authorisations and security impact assessments across system changes and upgrades
• Conduct and present security risk assessments, treatment options and recommendations to stakeholders and risk owners
• Maintain system security registers, asset baselines and authorisation documentation
• Work closely with engineering, configuration management and data management teams to ensure governance activities remain aligned to system changes
• Engage with Defence stakeholders and assessment authorities to support authorisation outcomes

About You

You're someone who enjoys bringing structure to complexity. You understand technical systems, but your strength lies in translating risk into clear, defensible and professionally presented security outcomes.

• Experience in cyber GRC, risk management, and Defence Assessment and Authorisation (A&A) processes