GRC Specialist

St John WA has been serving the Western Australian community since 1922. Our organisation has grown into an integrated healthcare provider, connecting people across WA to lifesaving emergency services, urgent care, and health education.

We are a not-for-profit organisation, and we are committed to making a positive impact on the safety, wellbeing, and health of everyone, no matter where in WA they live. Our services are powered by more than 8,000 dedicated employees and volunteers who bring care, skill, and compassion to every corner of the state.

About the Role:

We are looking for a GRC Specialist to join our Digital services department on a Permanent fulltime basis.

As our GRC Specialist, you will play a pivotal role in strengthening our Governance, Risk, and Compliance functions within the Digital Services department. Your responsibilities will include developing policies, conducting assessments against industry frameworks, managing third-party risks, and overseeing risk and compliance management. With a focus on maintaining and enhancing our governance standards, you’ll support critical controls assurance through activities such as penetration testing and compliance audits.

We are seeking an experienced professional who thrives on autonomy and takes ownership in the GRC space. In this role, you’ll engage with stakeholders to translate technical requirements into actionable business insights, helping drive improvements that support the wellbeing and safety of the community. This is a unique opportunity to make a meaningful impact while ensuring St John WA’s digital security and resilience remain at the forefront.

What You’ll Do:

• Develop and maintain governance frameworks, policies, and standards
• Conduct risk assessments, support risk workshops, and manage third-party risk
• Oversee compliance processes and ensure adherence to internal and external standards
• Support controls assurance activities, including penetration testing and audits
• Engage with stakeholders to translate technical requirements into actionable business insights

What You’ll Need:

• Proven experience (5+ years) in a similar GRC role and relevant qualifications or certifications (e.g., CISSP, CISM)
• Advanced knowledge in Governance, Risk, and Compliance within Cybersecurity and Technology
• Familiarity with industry frameworks such as NIST CSF, PCI-DSS, COBIT, and ITIL
• Strong communication and stakeholder management skills at all levels

Benefits:

The successful candidate will be offered an interactive and supportive working environment, along with:

• $550 Health and Wellness reimbursement
• 17.5% leave loading
• Corporate uniform
• Salary packaging and novated leasing
• Consumer discounts
• Discounts on first aid equipment
• Complimentary First Aid Training
• Complimentary ambulance cover

Ready to Apply?

To be considered for this opportunity, please click Apply Now. You will need to complete the online application form and must include a detailed cover letter outlining your motivations for this position and resume.

Applicants will receive an automated receipt on application. If you have not received this email, please contact the Talent Sourcing team prior to the closing date and time. Late or incomplete applications will not be accepted. Applications that do not include both a cover letter and resume may not be considered.

Alternatively, if you have any questions, please contact Talent Sourcing on careers@stjohnwa.com.au 

Applications close on Tuesday 27 October 2026 at 6:00pm

St John WA is committed to fostering an inclusive, welcoming, and diverse workplace where everyone feels safe to be themselves. We encourage applications from people of all ages, genders, nationalities, abilities, and cultural backgrounds, including Aboriginal and Torres Strait Islander peoples and the LGBTIQ+ community.

St John WA is a child-safe organisation and takes a proactive approach to child safety. We ensure all children engaged in St John WA services are protected, respected, and empowered. Our commitment is supported by clear policies and procedures that reinforce our safeguarding practices.

St John WA reserves the right to select a shortlist from the applications received. The selection process employed will be at the discretion of St John WA.