Security Governance Officer

ASIC; Traralgon; On-site; AUD 97,000 - 116,000; Full time

Benefits offered by this job

Attractive superannuation

Additional leave entitlements

50/50 hybrid work-from home model

Flexible work arrangements

Assistance for study and professional

Job summary

ASIC is seeking a Security Governance & Assessment Officer within the Chief Risk Office to maintain protective security policies, perform risk assessments, and support reporting obligations under government policy frameworks.

You will contribute to enterprise security governance, information security duties, and protect ASIC sites with data-driven insights and clear guidance across the organisation.

Qualifications

• Experience in governance, investigation, risk management and audit.
• Ability to interpret security requirements and translate into practical guidance.
• Strong written and verbal communication with stakeholders.

Responsibilities

• Deliver regular internal and external reporting on security policy compliance.
• Monitor security threat and risk environment and report identified risks.
• Conduct security threat and risk assessments and maintain threat database.
• Support Insider Threat Mitigation by assessing concerns and reviews.
• Analyse protective security data, trends and KPIs; conduct audits.
• Undertake QA and governance activities, reviewing policies and guidelines.

Skills

Governance

Risk management

Audit

Administration

Security policies

Job description

At ASIC, you can be the change that ensures a fair, strong and efficient financial system for the benefit of all Australians. Contribute to delivering on ASIC's purpose, vision, and strategic priorities to help maintain the integrity of the financial system and protect consumers from harm.

• All ASIC office locations considered
• Salary range $97,401~$115,820 (depending on experience) plus 15.4% superannuation
• Temporary role (12 month contract)
• Applications close at 11:59pm AEST, Tuesday 22 September 2026

The team

The Chief Risk Office is the custodian of enterprise risk management, business resilience, protective security and compliance management across ASIC. Within the Chief Risk Office, the Protective Security team helps ensure ASIC's security governance, information, personnel and physical security arrangements are effective and meet the Australian Government Protective Security Policy Framework. The team also manages baseline security clearance vetting, security investigations and access control across ASIC sites, and works closely with ASIC's Chief Information Security Officer to support a holistic approach to agency security.

The role

As a Security Governance & Assessment Officer, you will maintain and review protective security policies, plans and procedures, and support ASIC to meet its reporting and information security obligations.

• Deliver regular, quarterly and annual internal and external reporting relating to the Australian Government Protective Security Policy Framework.
• Monitor the security threat and risk environment and report and assess any identified or emerging security risks.
• Conduct security threat and risk assessments, including maintaining a database of identified threats to ASIC.
• Support the management and delivery of ASIC's Insider Threat Mitigation Framework by undertaking assessments of reported security concerns and conducting reviews, investigations and re-assessments of employee suitability as required.
• Analyse and collate protective security data, trends and key metrics, and conduct audits of security data, KPIs and dashboards.
• Undertake quality assurance and governance activities, including reviewing policies, plans, procedures and guidelines and supporting procurement, contract administration and record management.

About You

You will bring relevant experience or qualifications in governance, investigation, risk management, audit and administration, together with the ability to interpret security requirements and turn technical information into clear, practical advice. You are organised, collaborative and comfortable working independently to deliver accurate work within strict timeframes.

You Will Also Demonstrate

• Knowledge of, or experience applying, the Australian Government Protective Security Policy Framework.
• Strong IT literacy, including experience handling data, preparing reports and communicating key security metrics.
• The ability to build and maintain effective relationships with internal stakeholders, other government agencies and specialist functions.
• Sound written and verbal communication skills, including the ability to translate technical information for non-technical audiences.
• Capability in problem solving, risk management, project management and using technology to improve processes and outcomes.

About ASIC

ASIC's remit is one of the broadest of regulators across the world. ASIC regulates corporations, markets, financial services and consumer credit and monitors and promotes market integrity and consumer protection in the Australian financial system. Through our enforcement work, we hold to account those who contravene the law, working to achieve strong outcomes that address the greatest consumer and investor harms.

ASIC is an equal opportunity employer seeking people who want to make a difference. ASIC is committed to providing a diverse and inclusive workplace where the very best talent in Australia chooses to work. Applications from people of all ages, cultural backgrounds, abilities, LGBTIQ+ identity, and people of Aboriginal and Torres Strait Islander descent are encouraged to apply.

We Offer a Range Of Employee Benefits Including

• Attractive superannuation
• Additional leave entitlements
• 50/50 hybrid work-from home model
• Flexible work arrangements
• Assistance for study and professional development

To work with us, you need to be an Australian citizen and be prepared to complete an ASIC Suitability and Baseline Assessment, together with the ability to gain and maintain a Negative Vetting Level 2 security clearance.