Cyber GRC Analyst: M365 Security & ATO Compliance

Compas; Canberra; On-site; AUD 100,000 - 130,000; Full time

Job summary

Compas in Canberra is seeking a Cyber GRC Analyst to deliver secure external collaboration within a complex Australian Government environment. The role focuses on Microsoft 365 security, cyber risk assessments, governance and compliance, and security documentation to achieve Authority to Operate (ATO).

You will work across Microsoft Purview, Entra ID and Defender to implement security controls, manage RBAC and Conditional Access, and ensure alignment with ISM, Essential Eight, and DSPF while

Qualifications

• Strong experience in cyber security governance, risk and compliance (GRC).
• Experience implementing and securing Microsoft 365 environments (Entra ID, Defender, Purview).
• Knowledge of Australian Government security frameworks and accreditation processes.

Responsibilities

• Develop security documentation packs to support ATO.
• Lead cyber risk assessments across Microsoft 365 environments.
• Implement and manage security controls across Purview, Entra ID and Defender, including RBAC and Conditional Access.
• Ensure alignment with Australian Government security standards and engage stakeholders.

Skills

Cyber security governance

Risk assessments

Compliance management

Security documentation

Tools

Microsoft Purview

Entra ID

Microsoft Defender

Job description

Compas in Canberra is seeking a Cyber GRC Analyst to deliver secure external collaboration within a complex Australian Government environment. The role focuses on Microsoft 365 security, cyber risk assessments, governance and compliance, and security documentation to achieve Authority to Operate (ATO).

You will work across Microsoft Purview, Entra ID and Defender to implement security controls, manage RBAC and Conditional Access, and ensure alignment with ISM, Essential Eight, and DSPF while