Cyber GRC Analyst – MS 365 Security & ATO (NV1)

Compas Pty Ltd; Canberra; On-site; AUD 90,000 - 120,000; Full time

Job summary

Compas Pty Ltd in Canberra is seeking a Cyber GRC Analyst to deliver risk-based governance and compliance support within a complex Australian Government environment.

You will lead cyber risk assessments for Microsoft 365, implement security controls across Purview, Entra ID and Defender, and produce documentation to achieve Authority to Operate (ATO).

The role requires NV1 clearance and a start ASAP through to June 2027, focusing on ISM, Essential Eight and related Australian security frameworks.

Qualifications

• Strong governance, risk and compliance (GRC) experience in cyber security.
• Experience securing Microsoft 365 environments including Entra ID and Defender.
• Knowledge of identity and access management, PIM, CA and external B2B collaboration.
• Understanding of data protection and Australian Government security frameworks.

Responsibilities

• Develop security documentation packs to support Authority to Operate (ATO).
• Lead cyber risk assessments across Microsoft 365 environments, identifying vulnerabilities and mitigations.
• Implement and manage security controls across Purview, Entra ID and Defender (RBAC and Conditional Access).
• Align with ISM, Essential Eight, DSPF, PSPF and ASD Blueprint for Secure Cloud; engage stakeholders.

Skills

Cyber GRC

Microsoft 365 security

Risk assessments

Policy governance

RBAC/CA

Tools

Purview

Defender

Entra ID

Job description

Compas Pty Ltd in Canberra is seeking a Cyber GRC Analyst to deliver risk-based governance and compliance support within a complex Australian Government environment.

You will lead cyber risk assessments for Microsoft 365, implement security controls across Purview, Entra ID and Defender, and produce documentation to achieve Authority to Operate (ATO).

The role requires NV1 clearance and a start ASAP through to June 2027, focusing on ISM, Essential Eight and related Australian security frameworks.