About the organisation

Our client is a federal government agency in Canberra responsible for delivering a national-scale public program that the whole country relies on. The workplace is high-visibility, tightly governed and genuinely time-critical, with defined delivery peaks that lift the tempo across the technology group. Security is treated as core business, not an afterthought.

About the role

This is a senior cyber security governance, risk and compliance role sitting within a broader resilience uplift program, reporting to the agency's Cyber Security function. You will be the GRC voice in the room as solutions are designed, security requirements are set and assurance activities run.

It suits a contractor who is comfortable working across technical delivery teams and senior executives in the same day, and who can turn complex security detail into documentation and advice a decision-maker can act on. During peak delivery periods the role also supports program-specific security requirements, so extended hours and occasional weekend work are part of the engagement.

What you will be doing

- Contributing security considerations into solution design
- Reviewing and recommending security requirements across the program
- Developing communications and documentation for senior executive decision making
- Supporting coordination of security assurance activities, including IRAP and penetration testing
- Leading the development of formal security documentation

Skills and experience

- Demonstrated experience performing a cyber security GRC role
- Working knowledge of the Information Security Manual (ISM), Protective Security Policy Framework (PSPF) and Essential Eight




- Proven experience developing GRC documentation to a professional standard
- Demonstrated experience managing stakeholder or client relationships through to an outcome
- Minimum five years in related roles is highly regarded

Eligibility

- Australian citizenship
- NV1 clearance strongly preferred. NV1 must be held prior to commencement, as the role requires access to classified information. Candidates in the final stages of NV1 are welcome to apply and will be assessed on a case-by-case basis
- Onsite presence in the ACT is required. Temporary work from home is considered case by case

Contract details

- Start date: early September 2026
- Initial term: 12 months, with one 12 month extension option
- Hours: 7.5 hours per day, Monday to Friday. Additional hours during peak delivery periods
- Location: Canberra ACT, onsite
- Rate: competitive day rate, negotiable based on experience. Please provide your day rate, ex GST for Pty Ltd contractors or inclusive of superannuation for PAYG

Why take it

Federal agency GRC work with a clear mandate, a defined uplift program and real executive visibility. You will own formal security documentation end to end rather than editing someone else's, and the extension option gives genuine runway. Cleared GRC contractors in Canberra are in short supply, and this client is moving quickly.

How to apply

Click APPLY with an updated CV. Applications close Monday 24 August 2026, and the Exceed Global team is shortlisting as submissions arrive, so early applications are encouraged.

Refer and get rewarded: if you refer a friend or colleague and they are successful in finding a role with us, we will give you a Visa Debit Card as your referral gift.

📌 Senior Cyber Security Governance Analyst (Canberra)
🏢 Exceed Global
📍 Canberra