Cyber GRC Analyst

Mackay Executive; Canberra; On-site; AUD 90,000 - 115,000; Full time

Job summary

Our client, a high-profile federal government agency, is seeking an APS6 cyber security professional to join the Cyber Security team in Canberra on-site.

The role supports the resilience uplift program and will handle security design, requirements, executive communications, IRAP and pen test coordination, and formal security documentation. NV1 clearance is required; no work from home.

Contract is 12 months with potential extension; candidate experience in GRC and public sector preferred.

Qualifications

• Role requires APS6 level experience in cyber security and governance.
• Experience with IRAP and security assurance processes is desirable.
• Knowledge of ISM, PSPF, and Essential Eight is preferred.

Responsibilities

• Contributing to solution design for security considerations.
• Review and provide recommendations to develop security requirements.
• Develop communications and documentation for senior executive decision making.
• Support the coordination of security assurance processes including IRAP and penetration testing.
• Lead the development of formal security documentation (eg, IRAP assessments and authorization reports).
• Previous experience carrying out a GRC role, and within a public sector agency.
• Knowledge of the Information Security Manual, Protective Security Policy Framework and Essential Eight.
• Experience managing interactions with stakeholders (so not just working within the team).
• Experience in the management of IRAP assessments and pen testing (not doing).

Skills

APS6 level

Security clearance NV1

GRC experience

Stakeholder engagement

Job description

Our client is a high-profile federal government agency.

This contract role will be undertaken in their Canberra office.

There will be no WFH, unless negotiated as most work must be undertaken on site.

This contract is being let for an initial 12 months, with an expected 12 month extension. (It is unlikely to go past 24 months.)

Experience level is APS6 level (so, mid-level).

This is a new role, so no incumbent leaving.

Security level - a current NV1 is required, at a minimum.

The Role & Key Duties

This role will support the client's resilience uplift program, and will be a part of the Cyber Security team.

The role will be responsible for various cyber functions, including:

Contributing to solution design for security considerations;

Review and provide recommendations to develop security requirements;

Develop communications and documentation for senior executive decision making;

Support the coordination of security assurance processes including IRAP and penetration testing;

Lead the development of formal security documentation (eg, IRAP assessments and authorization reports).

Previous experience carrying out a GRC role, and within a public sector agency.

Knowledge of the Information Security Manual, Protective Security Policy Framework and Essential Eight.

Experience managing interactions with stakeholders (so not just working within the team).

Experience in the management of IRAP assessments and pen testing (not doing).

Admin

This role should be quite interesting, and there is a good team in place.

We will be keeping this advertisement open until COB this Friday 21 August.

We will be reviewing candidate resumes progressively through this week, so if you have the security level, skills and experience required for this role, please do not delay in applying.