Senior Cyber Compliance & Assurance Specialist

Air Services Australia; Canberra; On-site; AUD 180,000 - 240,000; Full time

Job summary

Airservices Australia is seeking a Senior Cyber Compliance & Assurance Specialist to join our Cyber Design & Assurance team. You will lead governance, risk management and compliance activities across IT, OT, cloud and critical infrastructure.

You will manage audits, IRAP activities and regulatory reviews, develop risk registers and ensure security controls meet ISM, PSPF and Essential Eight, while collaborating with vendors and delivery partners to achieve ATO and accreditation outcomes.

Qualifications

• Significant experience in cyber security governance, risk management, compliance and assurance in complex enterprise, government, critical infrastructure or regulated environments.
• Experience managing audit activities, remediation programs and compliance improvement initiatives.
• Experience with ISO 27001, NIST CSF, SOCI Act, Privacy Act, CIS Controls and IRAP assessment processes.
• Strong working knowledge of Australian Government security frameworks including ISM, PSPF and Essential Eight.
• Experience with Governance, Risk and Compliance (GRC) platforms such as ServiceNow IRM/GRC, Archer, MetricStream or similar.
• Experience in critical infrastructure, OT, aviation, government, defence, utilities or similarly regulated industries.
• Well-developed written and oral communication skills for varied audiences.

Responsibilities

• Lead and support cyber security governance, risk management, compliance and assurance activities across Airservices information technology (IT), operational technology (OT), cloud and critical infrastructure environments.
• Conduct and oversee security assurance activities to support system accreditation, Authorisation to Operate (ATO), reassessment, and ongoing compliance obligations.
• Lead cyber security risk assessments and compliance reviews for new and existing systems, projects and services.
• Develop, maintain and monitor cyber security risk registers, treatment plans and risk acceptance artefacts.
• Review security documentation provided by vendors, suppliers and service providers to ensure compliance with contractual, regulatory and security requirements.
• Plan, coordinate and participate in audits, compliance assessments, IRAP activities and regulatory reviews, including remediation actions.
• Monitor compliance with ISM, PSPF, SOCI, Privacy Act and aviation obligations.
• Provide expert guidance on preventative, detective and corrective security controls and their effectiveness.
• Support evaluation and operation of GRC platforms and tooling for risk management, compliance and reporting.

Skills

Cyber governance

Risk management

Compliance & assurance

Audit management

GRC tools

Education

CRISC

CISSP

IRAP Assessor

Tools

ServiceNow IRM/GRC

Archer

MetricStream

Job description

Senior Cyber Compliance & Assurance Specialist

Job no: 502893
Work type: Full Time Permanent
Location: ACT, QLD
Categories: Information Technology, Technology

• Airservices Australia is seeking a dynamic cyber security professional to join the Cyber Design & Assurance Lead to join our Technology Strategy, Assurance & Cyber team.
• Full Time Permanent position
• ACT or Brisbane location

The Organisation

Airservices Australia is a government-owned organisation responsible for the safe and efficient management of 11% of the world’s airspace and provision of aviation rescue fire fighting services at Australia’s busiest airports.

Our people are our greatest asset with a dynamic and diverse team operating from locations across the country - from bustling cities to regional and remote locations, including an island. This team keep are helping to secure the future of Australia’s skies and keep it amongst the safest in the world.

We connect people with their world safely – linking family and friends, generating economic activity, creating jobs, and facilitating trade and tourism.

Airservices is committed to fostering a culture that is diverse, inclusive, and respectful. We encourage motivated individuals who love what they do, value a service first mindset and embrace a challenge to explore a career with Airservices. In return you will be a valued team member, be offered flexibility and experience a meaningful career in an exciting, ever-evolving aviation industry.

Senior Cyber Compliance & Assurance Specialist

Are you ready to be on the frontline of cyber defence in Australia’s most critical aviation infrastructure organisation

Airservices Australia is seeking a dynamic cyber security professional to join the Cyber Design & Assurance Leadto join ourTechnology Strategy, Assurance & Cyberteam.

This role is responsible for supporting the delivery of enterprise-wide security governance, including the secure by design process, engagement with commercial delivery partners and supporting cyber design and assurance outcomes.

About the Role

As a Cyber Assurance Officer working within Cyber Design & Assurance, you will:

• Lead and support cyber security governance, risk management, compliance and assurance activities across Airservices information technology (IT), operational technology (OT), cloud and critical infrastructure environments.
• Conduct and oversee security assurance activities to support system accreditation, Authorisation to Operate (ATO), reassessment, and ongoing compliance obligations.
• Lead cyber security risk assessments and compliance reviews for new and existing systems, projects and services.
• Develop, maintain and monitor cyber security risk registers, treatment plans and risk acceptance artefacts, ensuring effective management and visibility of cyber security risks.
• Review and assess security documentation provided by vendors, suppliers and service providers to ensure compliance with contractual, regulatory and security requirements.
• Plan, coordinate and participate in audits, compliance assessments, IRAP activities and regulatory reviews, including management of findings and remediation actions.
• Monitor compliance with applicable legislation, standards and frameworks including the Information Security Manual (ISM), Protective Security Policy Framework (PSPF), Security of Critical Infrastructure Act (SOCI), Privacy Act, and relevant aviation obligations.
• Provide expert guidance on preventative, detective and corrective security controls and assess their effectiveness in reducing organisational cyber risk.
• Support the evaluation and operation of Governance, Risk and Compliance (GRC) platforms and tooling used for risk management, compliance and control assurance and reporting.

Please see the link below to view the full Position Description:

• Significant experience in cyber security governance, risk management, compliance and assurance functions within complex enterprise, government, critical infrastructure or regulated environments.
• Experience managing audit activities, remediation programs and compliance improvement initiatives.
• Experience with regulatory and compliance frameworks such as ISO 27001, NIST CSF, SOCI Act, Privacy Act, CIS Controls and IRAP assessment processes.
• Strong working knowledge of Australian Government security frameworks including ISM, PSPF and Essential Eight.
• Experience operating or administering Governance, Risk and Compliance (GRC) platforms such as ServiceNow IRM/GRC, Archer, MetricStream or similar solutions.
• Experience working with critical infrastructure, operational technology (OT), aviation, government, defence, utilities or similarly regulated industries would be highly regarded.
• Well-developed written and oral communication skills, including writing for a wide range of technical and non-technical audiences

Qualifications

• A relevant degree or industry qualification e.g. CRISC, CISSP, CISM, IRAP Assessor, ISO 27001 Lead Auditor, ISO 27001 Lead Implementer, SABSA, FAIR, or equivalent.

At Airservices Australia, we embrace and thrive on diversity of thought, perspectives, and capabilities because we know the benefits of having a workforce that is representative of the community that we serve. We appreciate everyone is unique, and acknowledge diversity in thought leads to greater transparency and improved consideration in our decision making.

We believe a diverse workforce supported by an inclusive culture is central to our success. We actively encourage and welcome candidates from all cultural backgrounds, gender identities, people living with disability and Aboriginal and Torres Strait Islander peoples to apply.

Security Clearance

To be eligible to apply, you must be an Australian Citizen and be eligible to obtain and maintain an Australian Government Security Vetting Agency (AGSVA) Negative Vetting Level 1 (NV1) security clearance.

Why Join Us?

Airservices Australia manages over 11% of the world’s airspace and plays a vital role in keeping Australia’s skies safe. We are committed to safety, innovation, and resilience. As part of our cyber security leadership team, you’ll help protect the systems that underpin national aviation operations.

This is your opportunity to shape the future of cyber security operations in aviation. and be part of a mission that matters.

Advertised: 15 Oct 2026 12:00 AM AUS Eastern Daylight Time
Application close: 12 Nov 2026 11:55 PM AUS Eastern Daylight Time