Senior Cyber Security Analyst

Canberra Consulting; Canberra; On-site; AUD 150,000 - 190,000; Full time

Job summary

Canberra Consulting is seeking three Senior Cyber Security Analysts to support assurance, accreditation, governance and risk management in a Federal Government environment. You will develop and maintain security artefacts, including SSPs and risk assessments, to demonstrate compliance and support ATO/IATO processes.

Working across Microsoft cloud environments, you will produce security documentation, coordinate vulnerability management, and contribute to incident response and disaster recovery

Qualifications

• Experience delivering cyber security assurance and governance in Azure environments.
• Strong technical writing for security documentation and artefacts.
• Understanding Azure, Entra ID, Defender, Purview and Microsoft 365 security.
• Knowledge of ISM/PSPF and accreditation processes.

Responsibilities

• Develop, review and maintain SSPs, SRAs, and POA&Ms.
• Prepare documentation for ATO and IATO processes.
• Support risk assessments, assurance reviews and compliance activities.
• Develop security operating procedures and standards.
• Coordinate vulnerability assessments and remediation tracking.
• Improve security monitoring and continuous monitoring capabilities.
• Contribute to incident response, business continuity and disaster recovery documentation.
• Prepare governance reports, audit evidence and briefing materials.
• Work with project teams, vendors and system integrators to address security requirements.

Skills

Cyber security assurance

Accreditation governance

Risk management

Technical writing

Azure security

Stakeholder engagement

Education

Security certifications (CISSP / CISM / CCSP / Security+)

Tools

Azure

Entra ID

Defender

Purview

Microsoft Fabric

Microsoft 365

Job description

Senior Cyber Security Analysts – Assurance & Accreditation

• Location: Canberra, ACT.
• Duration: Initial 12 months, with two possible 12-month extensions.
• Anticipated start: December 2026
• Australian citizenship and current NV1 security clearance mandatory

About the opportunity

Canberra Consulting is seeking three Senior Cyber Security Analysts to support cyber security assurance, accreditation, governance and risk management activities within a Federal Government environment. These roles have a strong technical writing and security documentation focus. You will develop and maintain the security artefacts required to assess risks, demonstrate compliance and support the approval and ongoing operation of enterprise and project technology solutions. Working across Microsoft cloud environments, you will support services including Azure, Microsoft 365, Entra ID, Defender, Microsoft Fabric and Microsoft Purview, translating technical information into clear, accurate and actionable security documentation.

What you will do

• Develop, review and maintain System Security Plans (SSPs), Security Risk Assessments (SRAs), and Plans of Action and Milestones (POA&Ms).
• Prepare documentation and coordinate activities supporting Authority to Operate (ATO) and Interim Authority to Operate (IATO) processes.
• Support cyber security risk assessments, assurance reviews and compliance activities.
• Develop security operating procedures, standards and supporting technical documentation.
• Coordinate vulnerability assessments, penetration testing and remediation tracking.
• Support the development and improvement of security monitoring and continuous monitoring capabilities.
• Contribute to incident response, business continuity and disaster recovery documentation.
• Prepare governance reports, audit evidence, briefing materials and security advice.
• Work with project teams, vendors, service providers and system integrators to address security requirements and improve assurance practices.

What you will bringYou will demonstrate:

• Experience delivering cyber security assurance, accreditation, governance and risk management within Microsoft Azure environments.
• Strong technical writing skills, with experience producing security documentation and accreditation artefacts, including SSPs, risk assessments and ATO documentation.
• A sound understanding of Azure, Entra ID, Defender, Purview and Microsoft 365 security capabilities, including security considerations across data platforms such as Microsoft Fabric.
• Knowledge of the Australian Government Information Security Manual (ISM), Protective Security Policy Framework (PSPF) and security accreditation processes.
• The ability to interpret technical information, identify security risks and communicate practical advice to technical and non-technical stakeholders.
• Strong stakeholder engagement skills and the ability to coordinate assessments, documentation and remediation activities across multiple contributors.

Experience in Commonwealth Government, intelligence, law enforcement, national security or other highly regulated environments will be highly regarded.

Relevant tertiary qualifications or certifications such as CISSP, CISM, CCSP or Security+ are desirable.

Mandatory eligibility

Applicants must be Australian citizens and already hold a current NV1 security clearance or higher. Applicants who do not meet both requirements will not be progressed.

Successful candidates must also complete an organisational suitability assessment before commencement and meet applicable confidentiality and onboarding requirements.