? Security Requirement: Current NV1 Security Clearance or higher required
? Engagement: Full time Labour Hire Contract
About the Opportunity
Hatchit Studios is seeking an experienced Senior Cyber Security Governance Analyst for a long-term labour hire opportunity supporting a major Australian Federal Government agency.
The successful candidate will support cyber security Governance, Risk and Compliance (GRC) activities as part of a significant resilience uplift program. The role will work closely with cyber security teams, business stakeholders and external assurance providers to strengthen security governance, assurance and compliance outcomes.
This is a Canberra-based role requiring an onsite presence. Temporary work-from-home arrangements may be considered on a case-by-case basis.
Key Responsibilities
- Support cyber security Governance, Risk and Compliance (GRC) activities
- Contribute security considerations and requirements to solution design
- Review and provide recommendations for the development of security requirements
- Develop formal security and GRC documentation
- Prepare communications, reports and documentation to support senior executive decision-making
- Coordinate security assurance activities, including IRAP assessments and penetration testing undertaken by external providers
- Support the management of assurance findings and remediation activities
- Develop security documentation supporting IRAP and security authorisation processes, including System Security Plans (SSPs), Security Risk Management Plans (SRMPs), SSP Annexes and authorisation documentation
- Engage with technical teams,
business stakeholders and external security providers to achieve security and compliance outcomes
- Support additional cyber security requirements during key operational and electoral event periods
Skills & Experience Required
- Strong knowledge of the Australian Government Information Security Manual (ISM)
- Strong understanding of the Protective Security Policy Framework (PSPF)
- Knowledge and practical application of the Essential Eight
- Demonstrated experience performing a Cyber Security GRC role
- Experience developing formal cyber security governance, risk, assurance and compliance documentation
- Strong stakeholder and client engagement skills with demonstrated ability to drive outcomes
- Experience supporting security assurance, accreditation or authorisation activities
- Strong written communication skills, including the ability to prepare documentation for senior stakeholders
- Ideally 5+ years' experience across cyber security, governance, risk, compliance or related roles
- Previous Commonwealth Government cyber security experience will be highly regarded
Security & Location Requirements
Candidates must
- Hold a current NV1 security clearance or higher
- Be able to work onsite in Canberra, ACT
- Be available for full-time engagement
- Be prepared to work additional hours or weekends during occasional periods of heightened operational activity
The standard working pattern is 37.5 hours per week, with additional hours potentially required during electoral events or other periods of heightened activity. Why Consider This Opportunity?
- Long-term 12-month Federal Government engagement
- Potential additional 12-month extension
- Work on a significant cyber security resilience uplift program
- Exposure to Commonwealth security governance, assurance and authorisation activities
- Work alongside experienced government cyber security professionals and specialist external assurance providers
- Competitive market rates