Security Governance & Assessment Officer

ASIC; Darwin; Hybrid; AUD 97,000 - 116,000; Full time

Benefits offered by this job

Superannuation

Leave entitlements

Hybrid work model

Flexible work arrangements

Study and professional development

Job summary

ASIC is seeking a Security Governance & Assessment Officer to maintain and review protective security policies and support reporting obligations. The role sits within the Chief Risk Office and collaborates with security and IT functions to assure effective governance and compliance.

You will monitor risk environments, conduct assessments, and support mitigation of insider threats, while producing metrics and governance artefacts for assurance purposes.

Qualifications

• Governance experience or qualifications
• Experience in investigation, risk management, and audit
• Ability to interpret security requirements and translate technical info to practical advice
• Strong written and verbal communication skills
• Organisational and collaborative, able to work independently under deadlines

Responsibilities

• Deliver regular internal and external reporting per Protective Security Policy Framework
• Monitor security threat and risk environment and report risks
• Conduct security threat and risk assessments, maintaining threat database
• Support Insider Threat Mitigation Framework approvals and reviews
• Analyse protective security data, trends and KPIs; audit security data and dashboards
• Undertake QA and governance activities, reviewing policies and guidelines

Skills

Governance

Investigation

Risk management

Audit

Administration

Job description

At ASIC, you can be the change that ensures a fair, strong and efficient financial system for the benefit of all Australians. Contribute to delivering on ASIC's purpose, vision, and strategic priorities to help maintain the integrity of the financial system and protect consumers from harm.

• All ASIC office locations considered
• Salary range $97,401~$115,820 (depending on experience) plus 15.4% superannuation
• Temporary role (12 month contract)
• Applications close at 11:59pm AEST, Tuesday 22 September 2026

The team

The Chief Risk Office is the custodian of enterprise risk management, business resilience, protective security and compliance management across ASIC. Within the Chief Risk Office, the Protective Security team helps ensure ASIC's security governance, information, personnel and physical security arrangements are effective and meet the Australian Government Protective Security Policy Framework. The team also manages baseline security clearance vetting, security investigations and access control across ASIC sites, and works closely with ASIC's Chief Information Security Officer to support a holistic approach to agency security.

The role

As a Security Governance & Assessment Officer, you will maintain and review protective security policies, plans and procedures, and support ASIC to meet its reporting and information security obligations.

• Deliver regular, quarterly and annual internal and external reporting relating to the Australian Government Protective Security Policy Framework.
• Monitor the security threat and risk environment and report and assess any identified or emerging security risks.
• Conduct security threat and risk assessments, including maintaining a database of identified threats to ASIC.
• Support the management and delivery of ASIC's Insider Threat Mitigation Framework by undertaking assessments of reported security concerns and conducting reviews, investigations and re‑assessments of employee suitability as required.
• Analyse and collate protective security data, trends and key metrics, and conduct audits of security data, KPIs and dashboards.
• Undertake quality assurance and governance activities, including reviewing policies, plans, procedures and guidelines and supporting procurement, contract administration and record management.

About You

You will bring relevant experience or qualifications in governance, investigation, risk management, audit and administration, together with the ability to interpret security requirements and turn technical information into clear, practical advice. You are organised, collaborative and comfortable working independently to deliver accurate work within strict timeframes.

You Will Also Demonstrate

• Knowledge of, or experience applying, the Australian Government Protective Security Policy Framework.
• Strong IT literacy, including experience handling data, preparing reports and communicating key security metrics.
• The ability to build and maintain effective relationships with internal stakeholders, other government agencies and specialist functions.
• Sound written and verbal communication skills, including the ability to translate technical information for non‑technical audiences.
• Capability in problem solving, risk management, project management and using technology to improve processes and outcomes.

About ASIC

ASIC's remit is one of the broadest of regulators across the world. ASIC regulates corporations, markets, financial services and consumer credit and monitors and promotes market integrity and consumer protection in the Australian financial system. Through our enforcement work, we hold to account those who contravene the law, working to achieve strong outcomes that address the greatest consumer and investor harms.

ASIC is an equal opportunity employer seeking people who want to make a difference. ASIC is committed to providing a diverse and inclusive workplace where the very best talent in Australia chooses to work. Applications from people of all ages, cultural backgrounds, abilities, LGBTIQ+ identity, and people of Aboriginal and Torres Strait Islander descent are encouraged to apply.

We Offer a Range Of Employee Benefits Including

• Attractive superannuation
• Additional leave entitlements
• 50/50 hybrid work‑from home model
• Flexible work arrangements
• Assistance for study and professional development

To work with us, you need to be an Australian citizen and be prepared to complete an ASIC Suitability and Baseline Assessment, together with the ability to gain and maintain a Negative Vetting Level 2 security clearance.