Security Governance & Assessment Lead

ASIC; Sydney; On-site; AUD 97,000 - 116,000; Full time

Benefits offered by this job

Attractive superannuation

Additional leave entitlements

50/50 hybrid work-from home model

Flexible work arrangements

Assistance for study and professional 

development

Job summary

ASIC seeks a Security Governance & Assessment Officer to maintain protective security policies, plans, and procedures, ensuring compliance with reporting and information security obligations. The role focuses on governance, risk management, and data-driven security metrics across ASIC sites.

You will deliver regular reporting, monitor threats, conduct risk assessments, and support the Insider Threat Mitigation Framework while collaborating with stakeholders to strengthen agency security across

Qualifications

• Experience or qualifications in governance, investigation, risk management, audit or administration.
• Ability to interpret security requirements and translate technical information into practical guidance.
• Organised, collaborative, and capable of working independently to meet tight deadlines.

Responsibilities

• Deliver regular internal and external reporting under the Australian Government Protective Security Policy Framework.
• Monitor security threat and risk environment and report on identified or emerging risks.
• Conduct security threat and risk assessments and maintain a database of threats to ASIC.
• Support Insider Threat Mitigation Framework through assessments, reviews and re- assessments.
• Analyse protective security data, trends and KPIs, and perform audits of data and dashboards.
• Undertake quality assurance and governance activities including policy reviews and procurement support.

Skills

Protective Security Framework

IT literacy

Stakeholder engagement

Written & verbal communication

Risk management

Project management

Analytical skills

Job description

ASIC seeks a Security Governance & Assessment Officer to maintain protective security policies, plans, and procedures, ensuring compliance with reporting and information security obligations. The role focuses on governance, risk management, and data-driven security metrics across ASIC sites.

You will deliver regular reporting, monitor threats, conduct risk assessments, and support the Insider Threat Mitigation Framework while collaborating with stakeholders to strengthen agency security across