Cyber Security GRC & Accreditation Lead (NV1)

Compas PTY; Canberra; On-site; AUD 120,000 - 160,000; Full time

Job summary

Compas PTY is seeking a Cyber Security SME to deliver GRC and accreditation activities across government systems. Location options include Canberra, Melbourne, Sydney or Brisbane with a contract duration until 31 December and potential extension. NV1 clearance is required, and closing date is 17 September 2026.

The role focuses on creating security artefacts, conducting risk assessments, mapping controls to accreditation evidence, and supporting audits across projects and operations.

Qualifications

• Demonstrated experience as a Cyber Security SME or in Security Accreditation within government or regulated environments.
• Strong cyber security GRC, risk assessment, risk management, accreditation and authorisation experience.
• Experience developing accreditation artefacts and maintaining risk registers, remediation trackers and compliance evidence.
• Familiarity with ISM, PSPF and related security standards, with strong stakeholder engagement and reporting skills.

Responsibilities

• Develop and maintain security artefacts including BILA, SAP, SSP, SRMP, CMP, CSIRP and Security SOPs.
• Lead security risk assessments and manage security risks, vulnerabilities and remediation activities.
• Develop security control and evidence mapping, monitor controls and manage supporting accreditation evidence.
• Support security governance, compliance audits and system authorisation activities across project, engineering and operational teams.

Skills

Cyber security SME

Security governance

Risk assessment

Accreditation

Stakeholder engagement

Job description

Compas PTY is seeking a Cyber Security SME to deliver GRC and accreditation activities across government systems. Location options include Canberra, Melbourne, Sydney or Brisbane with a contract duration until 31 December and potential extension. NV1 clearance is required, and closing date is 17 September 2026.

The role focuses on creating security artefacts, conducting risk assessments, mapping controls to accreditation evidence, and supporting audits across projects and operations.