Senior Cyber Security Governance Analyst – Federal Government
Security Requirement: Current NV1 Security Clearance or higher required
About the Opportunity
Hatchit Studios is seeking an experienced Senior Cyber Security Governance Analyst for a long-term labour hire opportunity supporting a major Australian Federal Government agency.
The successful candidate will support cyber security Governance, Risk and Compliance (GRC) activities as part of a significant resilience uplift program. The role will work closely with cyber security teams, business stakeholders and external assurance providers to strengthen security governance, assurance and compliance outcomes.
This is a Canberra-based role requiring an onsite presence. Temporary work-from-home arrangements may be considered on a case-by-case basis.
Key Responsibilities
- Support cyber security Governance, Risk and Compliance (GRC) activities
- Contribute security considerations and requirements to solution design
- Review and provide recommendations for the development of security requirements
- Develop formal security and GRC documentation
- Prepare communications, reports and documentation to support senior executive decision-making
- Coordinate security assurance activities,
including IRAP assessments and penetration testing undertaken by external providers
- Support the management of assurance findings and remediation activities
- Develop security documentation supporting IRAP and security authorisation processes, including System Security Plans (SSPs), Security Risk Management Plans (SRMPs), SSP Annexes and authorisation documentation
- Engage with technical teams, business stakeholders and external security providers to achieve security and compliance outcomes
- Support additional cyber security requirements during key operational and electoral event periods
Skills & Experience Required
- Robust knowledge of the Australian Government Information Security Manual (ISM)
- Strong understanding of the Protective Security Policy Framework (PSPF)
- Knowledge and practical application of the Essential Eight
- Demonstrated experience performing a Cyber Security GRC role
- Experience developing formal cyber security governance, risk, assurance and compliance documentation
- Strong stakeholder and client engagement skills with demonstrated ability to drive outcomes
- Experience supporting security assurance, accreditation or authorisation activities