About the job

Senior Cyber Security Governance Analyst | Canberra

📌 Role Details🇦🇺 Eligibility: Australian Government environment; candidate must be eligible to obtain the required clearance🔐 Security Clearance: Must be able to obtain Negative Vetting Level 1 (NV1)📍 Location: Canberra / ACT🏠 Work Arrangement: Full-time onsite; temporary work-from-home arrangements may be considered case-by-case💼 Employment Type: Contract⏳ Contract Duration: 12 months initial term + potential 12-month extension📅 Start Date: 1 September 2026🎯 Experience: Senior level / APS6 equivalent; 5+ years of relevant experience desirable⏱️ Hours: Up to 45 hours per week; extended hours and weekend work may be required during key operational periods

🔐 About the RoleA senior Cyber Security Governance, Risk and Compliance (GRC) professional is required to support a major Australian public-sector cyber resilience uplift program.The role will contribute to cyber security governance and assurance activities, with additional support for high-priority operational requirements during key event periods.

• 🛡️ Key ResponsibilitiesContribute to security considerations within solution design
• Review and recommend appropriate cyber security requirements
• Develop high-quality communications and documentation for senior executive decision-making
• Support the coordination of security assurance activities, including IRAP assessments and penetration testing
• Lead the development and maintenance of formal cyber security and GRC documentation
• Support cyber governance, risk and compliance activities across the program
• Work closely with technical teams, business stakeholders and assurance functions
• Provide practical security advice and recommendations to support program outcomes

• 🎯 Essential Skills & ExperienceStrong knowledge of the Information Security Manual (ISM)
• Strong understanding of the Protective Security Policy Framework (PSPF)
• Knowledge and practical understanding of the Essential Eight
• Demonstrated experience performing a Cyber Security GRC role
• Demonstrated capability managing stakeholder and client relationships to achieve outcomes
• Demonstrated experience developing GRC and cyber security documentation
• Strong written and verbal communication skills
• Ability to work effectively in a senior, complex and delivery-focused environment

• ⭐ DesirableMinimum 5 years' experience in cyber security, GRC, risk, assurance or related roles
• Experience within Australian Government or similarly regulated environments
• Experience supporting security assurance activities such as IRAP and penetration testing
• Experience working on cyber resilience or security uplift programs
• Experience supporting high-priority operational or event-driven environments