Job Description
Senior Cyber Security Governance Analyst | Canberra
Eligibility: Australian Government environment; candidate must be eligible to obtain the required clearance
Security Clearance: Must be able to obtain Negative Vetting Level 1 (NV1)
Work Arrangement: Full time onsite; temporary work-from-home arrangements may be considered case-by-case
Experience: Senior level / APS6 equivalent; 5+ years of relevant experience desirable
Hours: Up to 45 hours per week; extended hours and weekend work may be required during key operational periods
About the Role
A senior Cyber Security Governance, Risk and Compliance (GRC) professional is required to support a major Australian public-sector cyber resilience uplift program.
The role will contribute to cyber security governance and assurance activities, with additional support for high-priority operational requirements during key event periods.
Contribute to security considerations within solution design
Review and recommend appropriate cyber security requirements
Develop high-quality communications and documentation for senior executive decision-making
Support the coordination of security assurance activities, including IRAP assessments and penetration testing
Lead the development and maintenance of formal cyber security and GRC documentation
Support cyber governance, risk and compliance activities across the program
Work closely with technical teams, business stakeholders and assurance functions
Provide practical security advice and recommendations to support program outcomes
Strong knowledge of the Information Security Manual (ISM)
Strong understanding of the Protective Security Policy Framework (PSPF)
Knowledge and practical understanding of the Essential Eight
Demonstrated experience performing a Cyber Security GRC role
Demonstrated capability managing stakeholder and client relationships to achieve outcomes
Demonstrated experience developing GRC and cyber security documentation
Strong written and verbal communication skills
Ability to work effectively in a senior, complex and delivery-focused environment
Minimum 5 years' experience in cyber security, GRC, risk, assurance or related roles
Experience within Australian Government or similarly regulated environments
Experience supporting security assurance activities such as IRAP and penetration testing
Experience working on cyber resilience or security uplift programs
Experience supporting high-priority operational or event-driven environments
#J-*****-Ljbffr