Cyber Security, GRC Specialist

Business Unit:  Information Technology
Date:  15 Apr 2026
Requisition ID:  882

About Snowy:

Snowy Hydro is a dynamic, integrated energy business that has been providing on-demand, reliable energy to Australia for generations. Snowy Hydro owns and operates a powerful combination of generation assets, including the iconic Snowy Hydro-electric Scheme, gas and diesel electricity generating plants, and contracted wind and solar energy in the National Electricity Market. We also provide electricity and gas to over 1.5 million retail customers through our retail brands Red Energy and Lumo Energy. Snowy 2.0, currently under construction, is Australia's largest committed renewable energy project. This nation-building project will provide on-demand energy and large-scale storage for many generations to come.

About the position:

We are looking for a Cyber GRC (Governance, Risk and Compliance) Specialist who will be responsible for developing, implementing and managing Snowy’s cybersecurity assurance, risk management and compliance programs.

This role will ensure we adhere to relevant laws, regulations and industry standards while proactively identifying and mitigating cyber risks.



Key Responsibilities:

  • Creation of operations of the assurance framework, conducting controls assessments and evaluating effectiveness

  • Review and update of existing information security policies

  • Promoting a strong cybersecurity culture through layperson communications

  • Consistently identifying and assessing risks

  • Coordinate and support internal and external security audits, including preparing audit evidence and managing remediation efforts

  • Ensuring adherence to applicable Australian and international cybersecurity laws, regulations and standards (e.g., Security of Critical Infrastructure Act, Privacy Act 1988, GDPR, CPS 234, PCI DSS, APRA, ASD/ACSC)

About the location:

This role can be based in Sydney or Melbourne.

 

It is a hybrid role (3 days in the office, 2 working from home).



About you:

  • You have a proven track record of developing and implementing security policies, standards and procedures

  • You bring a solid understanding of common information security frameworks  (e.g., AESCSF, ISO 27001, COBIT, PCI DSS, Essential Eight)

  • You have significant experience in governance, risk and compliance

  • You have excellent written and verbal communication skills, with the ability to articulate complex security concepts to technical and non-technical audiences

  • You bring relevant industry certifications (e.g., CISSP, CISM, CISA, CRISC, CompTIA Security+)

  • You have experience with GRC platforms/tools

  • You bring working experience with cloud security principles and frameworks (e.g., AWS, Azure, GCP)

Here are a few of the benefits we offer our employees:

  • A range of parental leave options, including 30 weeks paid leave for primary carers and 10 weeks for non-primary

  • We provide additional leave over and above the minimum National Employment Standards

  • Family discounts on fitness, gyms, pools and leisure centres

  • A Service Award Program - employees reaching continuous employment anniversaries receive additional benefits

  • Discounted energy rates

  • An employee referral plan - good employees attract similar colleagues

  • Discounts with major retailers

  • Corporate clothing allowance

About our workforce:

Diversity and inclusion is important to us:

Snowy Hydro has a culture of decency and inclusion, with a commitment to the health and wellbeing of our people and a supportive environment to ensure that everyone - regardless of background - feels included and can succeed. At Snowy Hydro, we recognise that we are made stronger by the unique capabilities and qualities that each individual brings, and we believe in providing an environment that allows that uniqueness to thrive.

 

Snowy Hydro is proud to be an Equal Opportunity employer. We are committed to the values of Equal Employment Opportunity and provide accessibility accommodations to applicants with physical and/or mental disabilities. If you are interested in applying for a role with Snowy Hydro and are in need of accommodation or special assistance to navigate our website or to complete your application, please send an email with your request to the Snowy Hydro recruitment team at recruitment@snowyhydro.com.au