Senior Cyber Security Governance Analyst

Role Details

Eligibility: Australian Government environment; candidate must be eligible to obtain the required clearance

Security Clearance: Must be able to obtain Negative Vetting Level 1 (NV1)

Location: Canberra / ACT

Work Arrangement: Full-time onsite; temporary work-from-home arrangements may be considered case-by-case

Employment Type: Contract

Contract Duration: 12 months initial term + potential 12-month extension

Start Date: 1 September 2026

Experience: Senior level / APS6 equivalent; 5+ years of relevant experience desirable

Hours: Up to 45 hours per week; extended hours and weekend work may be required during key operational periods

A senior Cyber Security Governance, Risk and Compliance (GRC) professional is required to support a major Australian public-sector cyber resilience uplift program.

The role will contribute to cyber security governance and assurance activities, with additional support for high-priority operational requirements during key event periods.

• Contribute to security considerations within solution design
• Review and recommend appropriate cyber security requirements
• Develop high-quality communications and documentation for senior executive decision-making
• Support the coordination of security assurance activities, including IRAP assessments and penetration testing
• Lead the development and maintenance of formal cyber security and GRC documentation
• Support cyber governance, risk and compliance activities across the program
• Work closely with technical teams, business stakeholders and assurance functions
• Provide practical security advice and recommendations to support program outcomes

• Strong knowledge of the Information Security Manual (ISM)
• Strong understanding of the Protective Security Policy Framework (PSPF)
• Knowledge and practical understanding of the Essential Eight
• Demonstrated experience performing a Cyber Security GRC role
• Demonstrated capability managing stakeholder and client relationships to achieve outcomes
• Demonstrated experience developing GRC and cyber security documentation
• Strong written and verbal communication skills
• Ability to work effectively in a senior, complex and delivery-focused environment

• Minimum 5 years' experience in cyber security, GRC, risk, assurance or related roles
• Experience within Australian Government or similarly regulated environments
• Experience supporting security assurance activities such as IRAP and penetration testing
• Experience working on cyber resilience or security uplift programs
• Experience supporting high-priority operational or event-driven environments

Apply Now If your background aligns with the above requirements, please connect or message me to discuss the opportunity.

For further information, please contact the eSync Solutions team at ***email_hidden*** or connect with us via LinkedIn.