Cyber Security Adviser - Risk and Compliance Analyst

face2face Recruitment; Canberra; On-site; AUD 120,000 - 150,000; Full time

Job summary

face2face Recruitment seeks a Cyber Security Adviser to lead governance, risk and compliance activities across complex government projects and digital services.

The role involves assessing risks, advising on control baselines, and coordinating with stakeholders to ensure security authorisation and compliance in AI, cloud and mainframe environments.

Qualifications

• Experience with SRA, SIA, threat modelling and risk treatment planning.
• Knowledge of ISO 27001, ISM, NIST and PSPF frameworks and standards.
• Experience with government security accreditation and authorisation processes.
• Excellent stakeholder engagement, communication and presentation skills.

Responsibilities

• Conduct Security Risk Assessments and Security Impact Assessments.
• Develop risk treatment strategies and security control baselines.
• Review IRAP, pen testing, SOC 1 and SOC 2 findings.
• Review service provider security and risk management documentation.
• Approve and re-evaluate Security to Operate decisions.
• Present risks, findings and recommendations to executives.

Skills

Information security

Risk management

Compliance frameworks

SRA & SIA

ISO 27001

NIST

PSPF

Threat modelling

Stakeholder engagement

Job description

Cyber Security Adviser - Risk and Compliance Analyst

Closing Date: 2pm Tuesday 1 September 2026
Locations: Canberra, Brisbane CBD, Melbourne CBD and Sydney CBD
Contract Duration: 12months + 12X-month extension/s

Why Join?

• Lead high-impact cyber security governance, risk and compliance activities
• Work across complex government projects and critical digital services
• Gain exposure to AI, cloud, SaaS and mainframe security environments
• Influence security decisions and strengthen enterprise risk management
• Engage with senior stakeholders across projects and service providers
• Build your expertise across leading security frameworks and standards

About the Role

Working across complex projects and service provider environments, this role leads and supports cyber security governance, risk and compliance activities, helping ensure systems meet security, authorisation and compliance requirements.

Key Responsibilities

• Conduct complex Security Risk Assessments and Security Impact Assessments
• Develop risk treatment strategies and appropriate security control baselines
• Review IRAP, penetration testing, SOC 1 and SOC 2 assessment findings
• Review service provider security and risk management documentation
• Issue, review and re-evaluate Security Approval to Operate decisions
• Present security risks, findings and recommendations to executive stakeholders

Skills & Experience

• Strong knowledge of information security, risk management and compliance frameworks
• Experience with SRA, SIA, threat modelling and risk treatment planning
• Knowledge of ISO 27001, ISM, NIST and PSPF frameworks and standards
• Experience with government security accreditation and authorisation processesStrong understanding of AI, cloud, SaaS and mainframe security risks
• Excellent stakeholder engagement, communication and presentation skills

Australian Citizenship & Existing Negative Vetting 1 security clearance is a mandatory requirement for this position.