About the role
A federal agency is looking for a senior cyber security governance, risk and compliance analyst to join its resilience uplift program. You will report into the agency's cyber security team, contributing to solution design for security considerations and supporting the coordination of security assurance processes including IRAP and penetration testing. This is a surge focused role tied to the delivery of electoral events, so extended hours and weekend work are required during key event periods, with possible further extension depending on proximity to the next major event.
Key responsibilities
You will review and provide recommendations to develop security requirements, develop communications and documentation for senior executive decision making, and lead the development of formal security documentation such as SSPs, SRMPs and SSP Annexes. You will manage stakeholder and client interactions across the agency to keep governance activities moving and support any election specific security requirements as they arise.
About you
- Solid working knowledge of the Information Security Manual, Protective Security Policy Framework and Essential Eight
- Demonstrated experience in a cyber security GRC role, Commonwealth government experience is well regarded but not required
- A track record of managing stakeholder or client relationships to achieve an outcome
- Hands on experience developing GRC documentation such as risk assessments, SSPs or SRMPs
- Comfortable coordinating (not necessarily performing) IRAP assessments and penetration testing activities
- Able to work onsite in the ACT full time, with flexibility for weekend and extended hours during electoral events
- Must hold NV1 clearance prior to commencement
What's on offer
A 12 month contract with a further 12 month extension option, working onsite with a federal agency's cyber security team on a high visibility resilience uplift program. Express interest through this listing to find out more.