Senior Cyber Security Governance Analyst

Senior Cyber Security Governance Analyst
Location: Canberra, ACT
Work arrangement: Full-time onsite
Contract: 12 months + possible 12-month extension
Estimated start date: 1 September 2026
Security clearance: Must be able to obtain Negative Vetting Level 1 (NV1)
  
We are seeking an experienced Senior Cyber Security GRC Specialist to support a major resilience uplift program within a Commonwealth Government environment.
  
Reporting to the organisation’s Cyber Security function, you will provide senior-level cyber security governance, risk and compliance support across the program. During major operational events, you will also assist with event-specific cyber security requirements.
  
This is a surge role directly supporting the delivery and resilience of critical government services. Candidates should be comfortable working in a high-assurance environment where priorities can shift quickly during key event periods.
  
Key Responsibilities

• Contribute to solution design, ensuring appropriate security considerations are incorporated.
• Review proposed solutions and provide recommendations on security requirements and controls.
• Develop clear communications, briefs and supporting documentation for senior executive decision-making.
• Support the coordination of security assurance activities, including IRAP assessments and penetration testing.
• Lead the development and maintenance of formal cyber security and GRC documentation.
• Support governance, risk, compliance and assurance activities across the resilience uplift program.
• Assist with event-specific cyber security requirements during key operational periods.
• Engage with technical, business and executive stakeholders to progress security outcomes.

  
Essential Requirements

1. Strong knowledge of the Australian Government Information Security Manual (ISM), Protective Security Policy Framework (PSPF) and Essential Eight.
2. Demonstrated experience and capability working in a cyber security Governance, Risk and Compliance (GRC)role.
3. Demonstrated experience managing stakeholder or client interactions to achieve agreed outcomes.
4. Demonstrated experience developing high-quality GRC and security documentation.

Desirable Experience

• A minimum of five years’ experience in cyber security, GRC, security assurance or closely related roles.

  
Working Arrangements
The position is full-time onsite in the ACT.
Temporary work-from-home arrangements may be considered on a case-by-case basis.
As this role supports major operational events, extended hours and weekend work will be required during key event periods. The maximum expected workload is 45 hours per week.
An extension of up to 12 months may be available depending on operational requirements and the timing of future major operational events.
Additional information

• 12 month contract
• NV1
• Canberra