Cyber Security SME

Compas; Canberra; On-site; AUD 120,000 - 180,000; Full time

Job summary

Compas is seeking a Cyber Security SME to deliver governance, risk and compliance (GRC) activities and security accreditation across secure government systems from Canberra. You will manage security artefacts, risk assessments and accreditation evidence, engaging with project, engineering and operations teams.

The role requires strong experience in GRC, risk management, accreditation and authorisation, and familiarity with security standards and governance.

Qualifications

• Demonstrated experience as a Cyber Security SME or in Security Accreditation within government or regulated environments.
• Strong cyber security GRC, risk assessment, risk management, accreditation and authorisation experience.
• Experience developing accreditation artefacts and maintaining risk registers, remediation trackers and compliance evidence.

Responsibilities

• Develop and maintain security artefacts including BILA, SAP, SSP, SRMP, CMP, CSIRP and Security SOPs.
• Lead security risk assessments and manage security risks, vulnerabilities and remediation activities.
• Develop security control and evidence mapping, monitor controls and manage supporting accreditation evidence.
• Support security governance, compliance audits and system authorisation activities across project, engineering and operational teams.

Skills

GRC

Accreditation

Risk assessment

Stakeholder engagement

Job description

Job Title:Cyber Security SME | GRC & Accreditation
Deliver cyber security governance, risk and compliance (GRC), security accreditation and authorisation activities across secure government systems, including security documentation, risk assessments, control mapping and accreditation evidence.
Location:Canberra, Melbourne, Sydney or Brisbane
Contract Duration: Until 31 December, with possible extension up to 12 months
Security Clearance Requirement: NV1
Closing Date: 10.00am, 17 September 2026
Essential Tasks:

• Develop and maintain security artefacts including BILA, SAP, SSP, SRMP, CMP, CSIRP and Security SOPs.
• Lead security risk assessments and manage security risks, vulnerabilities and remediation activities.
• Develop security control and evidence mapping, monitor controls and manage supporting accreditation evidence.
• Support security governance, compliance audits and system authorisation activities across project, engineering and operational teams.

Key Criteria:

• Demonstrated experience as a Cyber Security SME or in Security Accreditation within government or regulated environments.
• Strong cyber security GRC, risk assessment, risk management, accreditation and authorisation experience.
• Experience developing accreditation artefacts and maintaining risk registers, remediation trackers and compliance evidence.
• Familiarity with ISM, PSPF and related security standards, with strong stakeholder engagement and reporting skills.

YOUR APPLICATION WILL BE TREATED WITH THE STRICTEST CONFIDENCE:Due to the nature of this environment, candidates must hold a current NV1 clearance.