Job Description
Azooa is preparing a response for LH-***** – Senior Cyber Security Governance Analyst with the Australian Electoral Commission (AEC) and is seeking a suitably qualified cyber security professional for this chance.
n
Overview
n
The Australian Electoral Commission is seeking a Senior Cyber Security Governance Analyst – APS6 equivalent to support cyber security Governance, Risk and Compliance activities within the AEC's resilience uplift program.
n
The role reports to AEC Cyber Security and will also support election-specific cyber security requirements during electoral events.
n
This is a surge position linked to the delivery of electoral events and requires a consultant who can work confidently across security governance, assurance, executive documentation and stakeholder engagement in a high-assurance government environment.
n
Core Purpose
n
The successful candidate will support the AEC's cyber security resilience uplift by strengthening governance, security assurance and formal GRC documentation.
n
The role will contribute security considerations to solution design, develop and review security requirements, coordinate assurance activities such as IRAP and penetration testing, and prepare documentation supporting senior executive decision-making.
n
Scope / Responsibilities
n
n
Contribute security considerations to solution design
n
Review and provide recommendations for the development of security requirements
n
Develop communications and documentation for senior executive decision-making
n
Support coordination of security assurance processes
n
Support coordination of penetration testing
n
Lead the development of formal cyber security documentation
n
Support broader cyber security GRC activities within the resilience uplift program
n
Provide additional support for election-specific cyber security requirements during electoral events.
n
n
n
Knowledge of the Information Security Manual (ISM), Protective Security Policy Framework (PSPF) and Essential Eight
n
Demonstrated experience and capability performing a cyber security GRC role
n
Demonstrated experience managing stakeholder or client interactions to achieve an outcome
n
Minimum 5 years' experience in related roles.
n
n
Strong Candidate Profile
n
Candidates are likely to be particularly well positioned where they can demonstrate experience across:
n
n
Australian Government cyber security GRC
n




Security governance and risk management
n
Security requirements development
n
IRAP coordination or remediation
n
Security assurance
n
Formal security documentation
n
Executive briefs and decision papers
n
Stakeholder and client engagement
n
Security risk assessments
n
Working within classified Commonwealth environments
n
n
Role: Senior Cyber Security Governance Analyst
n
Experience Level: Senior – APS6 equivalent
n
Candidate Limit: Maximum 1 candidate per seller
n
Security Clearance: NV1 required prior to commencement
n
RFQ Closing: 11:59pm, Friday 28 August **** Canberra time
n
Working Arrangement
n
The role is full-time onsite in the ACT.
n
Temporary work-from-home arrangements may be considered on a case-by-case basis, but the AEC has confirmed that onsite presence in the ACT is required.
n
The normal working pattern is 7.5 hours per day, Monday to Friday, equating to 37.5 hours per week.
n
Additional hours may be required during electoral events or other periods of heightened activity, with 45 hours per week being a notional maximum where operationally required. Extended hours and weekend work may also be required during key event periods.
n
Clearance Requirements
n
An active NV1 clearance is required prior to commencement.
n
Although the original listing states that the candidate must be able to obtain NV1, the AEC subsequently clarified in the RFQ Q&A; that candidates must be NV1 cleared before commencing because the role requires access to classified information.
n
The AEC has also stated that candidates who already possess NV1 are strongly preferred. Candidates without the required clearance during interview may be removed from further consideration.
n
Azooa recommends structuring the pitch around clear evidence of:
n
n
ISM, PSPF and Essential Eight application
n
Hands‐on cyber security GRC delivery
n
Security governance and assurance
n
IRAP and penetration testing coordination
n
Development of formal GRC and security documentation
n




Practical outcomes achieved in government or comparable regulated environments
n
n
Specific examples with measurable outcomes will generally provide stronger evidence than broad capability statements.
n
RFQ Relevance
n
A strong submission should demonstrate more than general cyber security experience.
n
The AEC is specifically seeking someone with practical Governance, Risk and Compliance capability who can operate across both technical security assurance and senior‐level documentation.
n
Strong candidates should make their experience visible across:
n
n
Cyber security governance
n
Risk and compliance
n
Penetration testing assurance
n
Security requirements
n
n
Given the candidate limit of one, Azooa will be focusing on a strongly aligned profile with active NV1 clearance and clear evidence against all essential criteria.
n
Rate Guidance
n
Azooa recommends bidding around $135/hour PAYG including super or $137/hour + GST via Pty Ltd where commercially workable.
n
n
Azooa recommended value-for-money PAYG range: $132–$138/hour including super
n
Azooa recommended value-for-money Pty Ltd range: $134–$140/hour + GST
n
Preferred PAYG target: approximately $135/hour including super
n
Preferred Pty Ltd target: approximately $137/hour + GST
n
Azooa recommended maximum PAYG rate: $145/hour including super
n
Azooa recommended maximum Pty Ltd rate: $147/hour + GST
n
Around $132–$138/hour PAYG / $134–$140/hour + GST Pty Ltd: strongest value-for-money positioning and potentially a higher chance of winning where the candidate demonstrates strong role fit
n
Around $139–$145/hour PAYG / $141–$147/hour + GST Pty Ltd: may still be competitive where supported by strong Australian Government GRC experience, active NV1, IRAP exposure and excellent ISM / PSPF / Essential Eight capability
n
Above $145/hour PAYG / $147/hour + GST Pty Ltd: less competitive unless niche cyber security expertise, clearance, domain fit or exceptional Federal Government experience clearly justifies the higher rate
n
n
Higher rates may still be considered where niche cyber security skills, clearance, domain fit or strong program relevance outweigh rate competitiveness.
n
The RFQ itself does not publish a maximum hourly rate, so these figures are Azooa's recommended pricing guidance, not buyer-set caps.
#J-*****-Ljbffr

📌 Cyber Grc Analyst (Canberra)
🏢 Azooa
📍 Canberra