About the job

We’re Hiring | Senior Cyber Security Governance Analyst !!!!!!!!!!!

Canberra, ACT | Full-Time Onsite12-Month Contract + 12-Month ExtensionUp to 45 hours per week during peak operational periodsSecurity Clearance: NV1 required prior to commencementStart: September 2026

SkyDB is seeking an experienced Senior Cyber Security Governance Analyst to support a major cyber security resilience uplift program within a critical Australian Government environment. This is an excellent opportunity for a mid-to-senior level Cyber Security GRC professional with practical experience across governance, risk, compliance, security assurance and the development of formal security documentation. The successful candidate will work closely with cyber security teams, technical specialists, project stakeholders and senior decision-makers to ensure security requirements are appropriately considered, documented and implemented across the program.

About the RoleThe position will support cyber security Governance, Risk and Compliance (GRC) activities as part of a broader resilience uplift program. You will contribute to security considerations across solution design, assist with defining security requirements, coordinate assurance activities and develop formal documentation required to demonstrate security compliance and support decision-making. During major electoral events, the role may also support event-specific cyber security requirements, making this a particularly important position within a high-profile operational environment.

• Key ResponsibilitiesYou will be responsible for a range of cyber security governance activities, including:Contributing to solution design by identifying and addressing security considerations.
• Reviewing business and technical requirements and providing recommendations for appropriate security controls.
• Developing and reviewing cyber security requirements across projects and initiatives.
• Preparing clear and concise communications, reports and documentation to support senior executive decision-making.
• Supporting and coordinating security assurance activities, including IRAP assessments and penetration testing.
• Working with external assurance providers to coordinate assessments, track findings and support remediation activities.
• Leading the development and maintenance of formal security documentation.
• Preparing documentation required to support IRAP assessments, including System Security Plans (SSPs), Security Risk Management Plans (SRMPs), SSP Annexes / Statements of Applicability and related security artefacts.
• Supporting security authorisation and accreditation activities.
• Maintaining security records, reports, minutes and governance artefacts.
• Working collaboratively with technical and business stakeholders to ensure security requirements are understood and addressed.
• Supporting cyber security requirements during periods of heightened operational activity and major electoral events.

Key Skills & ExperienceThe ideal candidate will have a strong background in Cyber Security Governance, Risk & Compliance, with practical experience applying Australian Government security frameworks.

• Essential ExperienceDemonstrated experience working in a Cyber Security GRC role.
• Strong practical knowledge of:
• Information Security Manual (ISM)
• Protective Security Policy Framework (PSPF)
• Essential Eight
• Demonstrated experience developing formal GRC and security documentation.
• Experience coordinating security assurance activities, including IRAP assessments and penetration testing.
• Strong stakeholder and client management experience, with the ability to work with technical, business and senior stakeholders to achieve outcomes.
• Excellent written and verbal communication skills, particularly when preparing documentation and recommendations for senior decision-makers.
• Strong understanding of security risk, governance and compliance principles.

• Desirable Experience5+ years’ experience in relevant cyber security, GRC, governance, risk or assurance roles.
• Previous experience working within Commonwealth Government environments.
• Experience within State/Territory Government or large, complex private-sector environments will also be considered.
• Experience supporting security resilience or cyber security uplift programs.
• Experience preparing documentation such as SSPs, SRMPs, SSP Annexes/SoAs, authorisation reports and security governance records.

Australian Government Security RequirementsAn active NV1 Security Clearance is required prior to commencement.Candidates who already hold NV1 or a higher Australian Government security clearance are strongly preferred. The role involves access to classified information, and candidates who do not currently hold the required NV1 clearance may be removed from consideration during the selection process.