Security Governance & Assessment Officer

ASIC; Sydney; Hybrid; AUD 97,000 - 116,000; Full time

Benefits offered by this job

50/50 hybrid work-from-home model

Attractive superannuation

Additional leave entitlements

Study and professional development

Job summary

ASIC is seeking a Security Governance & Assessment Officer to strengthen protective security governance across the agency. The role covers policy maintenance, reporting under the Australian Government Protective Security Policy Framework, and risk-based improvements to security practices.

You will conduct threat assessments, support insider threat mitigation, and produce governance dashboards while collaborating with internal stakeholders and external partners.

Qualifications

• Experience in governance, investigation, risk management, audit and administration.
• Ability to interpret security requirements and translate technical information for non-technical audiences.
• Strong reporting, data handling and stakeholder liaison skills.

Responsibilities

• Deliver regular internal and external reporting under the Protective Security Policy Framework.
• Monitor security threat and risk environment and assess emerging risks.
• Conduct security threat and risk assessments and maintain a database of threats to ASIC.
• Support Insider Threat Mitigation framework through assessments and reviews of employee suitability.
• Analyse and collate protective security data, trends and KPIs, and run audits of data and dashboards.
• Undertake quality assurance and governance activities, reviewing policies, plans and procedures and supporting procurement and records management.

Skills

Governance

Investigation

Risk management

Audit

Administration

Policy development

Reporting

Data analysis

Security frameworks

Stakeholder engagement

Communication

Job description

Security Governance & Assessment Officer

At ASIC, you can be the change that ensures a fair, strong and efficient financial system for the benefit of all Australians. Contribute to delivering on ASIC's purpose, vision, and strategic priorities to help maintain the integrity of the financial system and protect consumers from harm.

Support ASIC's protective security governance by maintaining policies and assurance activities, delivering key reporting obligations and helping strengthen security risk management across the agency.

• All ASIC office locations considered
• Salary range $97,401~$115,820 (depending on experience) plus 15.4% superannuation
• Temporary role (12 month contract)
• Applications close at 11:59pm AEST, Sunday 27 September 2026

The team

The Chief Risk Office is the custodian of enterprise risk management, business resilience, protective security and compliance management across ASIC. Within the Chief Risk Office, the Protective Security team helps ensure ASIC's security governance, information, personnel and physical security arrangements are effective and meet the Australian Government Protective Security Policy Framework. The team also manages baseline security clearance vetting, security investigations and access control across ASIC sites, and works closely with ASIC's Chief Information Security Officer to support a holistic approach to agency security.

The role

As a Security Governance & Assessment Officer, you will maintain and review protective security policies, plans and procedures, and support ASIC to meet its reporting and information security obligations.

• Deliver regular, quarterly and annual internal and external reporting relating to the Australian Government Protective Security Policy Framework.
• Monitor the security threat and risk environment and report and assess any identified or emerging security risks.
• Conduct security threat and risk assessments, including maintaining a database of identified threats to ASIC.
• Support the management and delivery of ASIC's Insider Threat Mitigation Framework by undertaking assessments of reported security concerns and conducting reviews, investigations and re-assessments of employee suitability as required.
• Analyse and collate protective security data, trends and key metrics, and conduct audits of security data, KPIs and dashboards.
• Undertake quality assurance and governance activities, including reviewing policies, plans, procedures and guidelines and supporting procurement, contract administration and record management.

About you

You will bring relevant experience or qualifications in governance, investigation, risk management, audit and administration, together with the ability to interpret security requirements and turn technical information into clear, practical advice. You are organised, collaborative and comfortable working independently to deliver accurate work within strict timeframes.

You will also demonstrate:

• Knowledge of, or experience applying, the Australian Government Protective Security Policy Framework.
• Strong IT literacy, including experience handling data, preparing reports and communicating key security metrics.
• The ability to build and maintain effective relationships with internal stakeholders, other government agencies and specialist functions.
• Sound written and verbal communication skills, including the ability to translate technical information for non-technical audiences.
• Capability in problem solving, risk management, project management and using technology to improve processes and outcomes.

About ASIC

ASIC's remit is one of the broadest of regulators across the world. ASIC regulates corporations, markets, financial services and consumer credit and monitors and promotes market integrity and consumer protection in the Australian financial system. Through our enforcement work, we hold to account those who contravene the law, working to achieve strong outcomes that address the greatest consumer and investor harms.

ASIC is an equal opportunity employer seeking people who want to make a difference. ASIC is committed to providing a diverse and inclusive workplace where the very best talent in Australia chooses to work. Applications from people of all ages, cultural backgrounds, abilities, LGBTIQ+ identity, and people of Aboriginal and Torres Strait Islander descent are encouraged to apply.

We offer a range of employee benefits including:

• Attractive superannuation
• Additional leave entitlements
• 50/50 hybrid work-from home model
• Assistance for study and professional development

To work with us, you need to be an Australian citizen and be prepared to complete an ASIC Suitability and Baseline Assessment, together with the ability to gain and maintain a Negative Vetting Level 2 security clearance.