Cyber Security SME

Compas PTY; Canberra; On-site; AUD 120,000 - 160,000; Full time

Job summary

Compas PTY is seeking a Cyber Security SME to deliver GRC and accreditation activities across government systems. Location options include Canberra, Melbourne, Sydney or Brisbane with a contract duration until 31 December and potential extension. NV1 clearance is required, and closing date is 17 September 2026.

The role focuses on creating security artefacts, conducting risk assessments, mapping controls to accreditation evidence, and supporting audits across projects and operations.

Qualifications

• Demonstrated experience as a Cyber Security SME or in Security Accreditation within government or regulated environments.
• Strong cyber security GRC, risk assessment, risk management, accreditation and authorisation experience.
• Experience developing accreditation artefacts and maintaining risk registers, remediation trackers and compliance evidence.
• Familiarity with ISM, PSPF and related security standards, with strong stakeholder engagement and reporting skills.

Responsibilities

• Develop and maintain security artefacts including BILA, SAP, SSP, SRMP, CMP, CSIRP and Security SOPs.
• Lead security risk assessments and manage security risks, vulnerabilities and remediation activities.
• Develop security control and evidence mapping, monitor controls and manage supporting accreditation evidence.
• Support security governance, compliance audits and system authorisation activities across project, engineering and operational teams.

Skills

Cyber security SME

Security governance

Risk assessment

Accreditation

Stakeholder engagement

Job description

Job Title: Cyber Security SME | GRC & Accreditation Deliver cyber security governance, risk and compliance (GRC), security accreditation and authorisation activities across secure government systems, including security documentation, risk assessments, control mapping and accreditation evidence.

Location: Canberra, Melbourne, Sydney or Brisbane Contract Duration: Until 31 December, with possible extension up to 12 months Security Clearance Requirement: NV1 Closing Date: 10.00am, 17 September 2026

Essential Tasks:

• Develop and maintain security artefacts including BILA, SAP, SSP, SRMP, CMP, CSIRP and Security SOPs.


• Lead security risk assessments and manage security risks, vulnerabilities and remediation activities.


• Develop security control and evidence mapping, monitor controls and manage supporting accreditation evidence.


• Support security governance, compliance audits and system authorisation activities across project, engineering and operational teams.

Key Criteria:

• Demonstrated experience as a Cyber Security SME or in Security Accreditation within government or regulated environments.


• Strong cyber security GRC, risk assessment, risk management, accreditation and authorisation experience.


• Experience developing accreditation artefacts and maintaining risk registers, remediation trackers and compliance evidence.


• Familiarity with ISM, PSPF and related security standards, with strong stakeholder engagement and reporting skills.

YOUR APPLICATION WILL BE TREATED WITH THE STRICTEST CONFIDENCE:Due to the nature of this environment, candidates must hold a current NV1 clearance.