Senior Cyber Security Governance Analyst

Company Description:Welcome to VelTech, your trusted partner in ICT consulting and talent solutions. We specialise in providing contracting services, recruitment, and workforce solutions tailored to government agencies and private enterprises' unique needs.
As a growing company, we are committed to delivering excellence, agility, and reliability in every engagement. Our mission is to connect top IT talent with the right opportunities, ensuring successful project outcomes and long-term success for both businesses and professionals.
Partner with VelTech – Where Talent Meets Opportunity.
Role Overview:We are seeking an experienced Senior Cyber Security Governance Analyst to support critical cyber security governance, risk and compliance activities within a high-profile Australian Government environment. This is an excellent opportunity to contribute to a major cyber resilience uplift program and support the security of systems and services associated with significant national events.
As the Senior Cyber Security Governance Analyst, you will work closely with cyber security specialists, project teams, technical stakeholders and senior executives to ensure security considerations are effectively incorporated into solution design and delivery.
You will contribute to the development and review of security requirements, coordinate security assurance activities including IRAP assessments and penetration testing, and lead the preparation of formal security documentation. You will also prepare communications, recommendations and documentation to support senior executive decision-making.
The role requires strong knowledge of Australian Government cyber security frameworks, particularly the Information Security Manual (ISM), Protective Security Policy Framework (PSPF) and Essential Eight, together with demonstrated experience delivering effective Governance, Risk and Compliance (GRC) outcomes.
What We're Looking For:Demonstrated experience performing a Cyber Security Governance, Risk and Compliance (GRC) role within complex ICT environments.Strong knowledge and practical understanding of the Australian Government Information Security Manual (ISM), Protective Security Policy Framework (PSPF), and Essential Eight.Experience contributing to solution design and providing advice and recommendations regarding cyber security considerations and requirements.Demonstrated experience developing, reviewing and maintaining cyber security GRC documentation and formal security documentation.Experience coordinating or supporting security assurance activities, including IRAP assessments and penetration testing.Strong ability to identify, review and develop security requirements and provide practical recommendations to project and technical teams.Experience preparing communications, briefings, recommendations and documentation for senior executive decision-making.Excellent stakeholder and client engagement skills, with demonstrated ability to manage interactions and achieve agreed outcomes.Strong written communication skills with the ability to translate complex cyber security risks, requirements and issues into clear documentation for technical and non-technical stakeholders.Ability to work effectively across multidisciplinary project, technical and cyber security teams in a complex Government environment.Demonstrated ability to manage competing priorities and deliver high-quality outcomes in time-sensitive and operationally critical environments.Minimum 5 years' experience in cyber security, GRC, security assurance or related roles is highly desirable.Must hold or be able to hold an Australian Government AGSVA NV1 Security Clearance prior to commencement.Work location: Canberra ACT – full-time onsite. Temporary work-from-home arrangements may be considered on a case-by-case basis.Flexibility to work extended hours and weekends during key electoral event periods when operationally required.