Security Governance Officer

ASIC; Adelaide; Hybrid; AUD 97,000 - 116,000; Full time

Benefits offered by this job

50/50 hybrid work-from home model

Flexible work arrangements

Assistance for study and professional 

Attractive superannuation

Additional leave entitlements

Job summary

ASIC is seeking a Security Governance & Assessment Officer for a 12-month temporary contract in Australia. The role focuses on maintaining protective security policies, plans, and procedures, and ensuring compliance with reporting and information security obligations.

You will deliver quarterly and annual reporting, monitor threat environments, conduct risk assessments, and contribute to the Insider Threat Mitigation Framework while supporting governance activities across ASIC sites.

Qualifications

• Experience in governance, investigation, risk management, and audit.
• Ability to interpret security requirements and translate technical info into practical advice.
• Organised, collaborative and able to work independently within strict timeframes.

Responsibilities

• Deliver regular internal and external reporting relating to Protective Security Policy Framework.
• Monitor security threat and risk environment and report identified or emerging risks.
• Conduct security threat and risk assessments and maintain a database of threats to ASIC.
• Support Insider Threat Mitigation Framework by assessing concerns and conducting reviews and re-assessments.
• Analyse protective security data, trends, KPIs and dashboards; conduct audits of data and governance artifacts.

Skills

Governance

Investigation

Risk management

Audit

Administration

Job description

At ASIC, you can be the change that ensures a fair, strong and efficient financial system for the benefit of all Australians. Contribute to delivering on ASIC's purpose, vision, and strategic priorities to help maintain the integrity of the financial system and protect consumers from harm.

• All ASIC office locations considered
• Salary range $97,401~$115,820 (depending on experience) plus 15.4% superannuation
• Temporary role (12 month contract)
• Applications close at 11:59pm AEST, Tuesday 22 September 2026

The team

The Chief Risk Office is the custodian of enterprise risk management, business resilience, protective security and compliance management across ASIC. Within the Chief Risk Office, the Protective Security team helps ensure ASIC's security governance, information, personnel and physical security arrangements are effective and meet the Australian Government Protective Security Policy Framework. The team also manages baseline security clearance vetting, security investigations and access control across ASIC sites, and works closely with ASIC's Chief Information Security Officer to support a holistic approach to agency security.

The role

As a Security Governance & Assessment Officer, you will maintain and review protective security policies, plans and procedures, and support ASIC to meet its reporting and information security obligations.

• Deliver regular, quarterly and annual internal and external reporting relating to the Australian Government Protective Security Policy Framework.
• Monitor the security threat and risk environment and report and assess any identified or emerging security risks.
• Conduct security threat and risk assessments, including maintaining a database of identified threats to ASIC.
• Support the management and delivery of ASIC's Insider Threat Mitigation Framework by undertaking assessments of reported security concerns and conducting reviews, investigations and re-assessments of employee suitability as required.
• Analyse and collate protective security data, trends and key metrics, and conduct audits of security data, KPIs and dashboards.
• Undertake quality assurance and governance activities, including reviewing policies, plans, procedures and guidelines and supporting procurement, contract administration and record management.

About You

You will bring relevant experience or qualifications in governance, investigation, risk management, audit and administration, together with the ability to interpret security requirements and turn technical information into clear, practical advice. You are organised, collaborative and comfortable working independently to deliver accurate work within strict timeframes.

You Will Also Demonstrate

• Knowledge of, or experience applying, the Australian Government Protective Security Policy Framework.
• Strong IT literacy, including experience handling data, preparing reports and communicating key security metrics.
• The ability to build and maintain effective relationships with internal stakeholders, other government agencies and specialist functions.
• Sound written and verbal communication skills, including the ability to translate technical information for non-technical audiences.
• Capability in problem solving, risk management, project management and using technology to improve processes and outcomes.

About ASIC

ASIC's remit is one of the broadest of regulators across the world. ASIC regulates corporations, markets, financial services and consumer credit and monitors and promotes market integrity and consumer protection in the Australian financial system. Through our enforcement work, we hold to account those who contravene the law, working to achieve strong outcomes that address the greatest consumer and investor harms.

ASIC is an equal opportunity employer seeking people who want to make a difference. ASIC is committed to providing a diverse and inclusive workplace where the very best talent in Australia chooses to work. Applications from people of all ages, cultural backgrounds, abilities, LGBTIQ+ identity, and people of Aboriginal and Torres Strait Islander descent are encouraged to apply.

We Offer a Range Of Employee Benefits Including

• Attractive superannuation
• Additional leave entitlements
• 50/50 hybrid work-from home model
• Flexible work arrangements
• Assistance for study and professional development

To work with us, you need to be an Australian citizen and be prepared to complete an ASIC Suitability and Baseline Assessment, together with the ability to gain and maintain a Negative Vetting Level 2 security clearance.