Cyber Security Adviser | Governance, Risk & Compliance (GRC)
Role based in VIC, NSW, ACT, QLD
12 months with 12-month extension
Baseline clearance Required
About the Role
We are seeking experienced Cyber Security Advisers to lead and support the delivery of governance, risk, and compliance activities.
Working in close collaboration with the Cyber Operations branch and project and program stakeholders, the Cyber Governance Risk and Compliance teams play a critical role in meeting community expectations by ensuring digital services are secure, reliable, and accessible.
Key Responsibilities
Conduct Security Risk Assessments (SRAs) for new and existing systems.
Assess threats, vulnerabilities, and Foreign Ownership, Control and Influence (FOCI) risks.
Develop risk treatment strategies and security control baselines.
Perform Security Impact Assessments (SIAs) to determine appropriate security assessment pathways.
Review and analyse IRAP assessments, penetration testing reports, SOC 1 and SOC 2 reports.
Evaluate security documentation including Security Risk Assessments (SRA) and Security Risk Management Plans (SRMPs).
Support security authorisation and ongoing compliance activities.
Issue, review, and reassess Security Approval to Operate (SATO) outcomes.
Prepare reports, briefings, and presentations for executive-level audiences.
Skills & Experience Essential
Demonstrated experience conducting Security Risk Assessments (SRAs) and Security Impact Assessments (SIAs).
Strong understanding of information security principles, risk management frameworks, and governance practices.
Knowledge of security standards and frameworks including:
ISO *****
NIST Cybersecurity Framework




Information Security Manual (ISM)
Protective Security Policy Framework (PSPF)
Experience supporting security authorisation and accreditation processes.
Ability to review and interpret security assurance reports including IRAP, penetration testing, SOC 1, and SOC 2 assessments.
Strong knowledge of information security principles, risk management frameworks, and standards such as ISO *****, ISM, NIST, and PSPF.
Demonstrated experience conducting SRAs and SIAs, including threat modelling, risk treatment planning, and control effectiveness evaluation.
Familiarity with government and enterprise authorisation frameworks, including security accreditation processes and compliance in multi-vendor and cloud environments.
Extensive knowledge of Artificial Intelligence (AI) focusing on emerging risks and best practices
Extensive knowledge of Mainframe workplace focusing on emerging risks and best practices
Extensive knowledge of Cloud technologies (AWS, Azure, SaaS etc) focusing on emerging risks and best practices
Anticipate regulatory changes and shifting threat and vulnerability landscapes to plan and execute on improvement opportunities to system authorisation and cyber risk management practices.
Please note to apply for this role you must have a minimum of an Active Baseline security clearance
At Clicks we embrace diversity, inclusion and equal opportunity.
First Nations people are encouraged to apply.
We provide reasonable adjustments, including alternate formats to the recruitment process for individuals with a disability.
If you require an adjustment to be made during the recruitment process, please call ************ or ******
#J-*****-Ljbffr

📌 Cyber Security Adviser - Risk And Compliance Analyst (Melbourne)
🏢 Clicks It Recruitment
📍 Melbourne