Senior Cyber Security Governance Analyst

Compas PTY; Canberra; On-site; AUD 110,000 - 140,000; Full time

Job summary

Compas PTY is seeking a Senior Cyber Security Governance Analyst to support GRC activities for a major Australian Government resilience uplift program. This full-time onsite role in the ACT involves delivering security assurance, documentation and executive advisory services.

The role requires NV1 clearance, knowledge of ISM/PSPF/Essential Eight, and experience in cyber security GRC with stakeholder engagement.

Qualifications

• Knowledge of the Information Security Manual (ISM), Protective Security Policy Framework (PSPF) and Essential Eight.
• Experience in a cyber security GRC role.
• Experience managing stakeholder or client interactions to achieve outcomes.
• Experience developing GRC documentation.

Responsibilities

• Contribute security considerations to solution design and develop security requirements.
• Develop communications and documentation to support senior executive decision-making.
• Coordinate security assurance activities, including IRAP and penetration testing.
• Lead the development of formal cyber security documentation.

Skills

GRC governance

Stakeholder management

Security documentation

Executive advisory

Job description

Senior Cyber Security Governance Analyst | GRC & NV1:

Support cyber security GRC activities across a major Australian Government resilience uplift program, delivering security assurance, documentation and executive advice. This is a full-time onsite role in the ACT.

Location:

ACT

Work Arrangement:

Full-time onsite. Temporary work from home arrangements may be considered on a case-by-case basis. Extended hours and weekend work are required during key event periods.

Contract Duration:

12 months, with a possible 12-month extension

Security Clearance Requirement:

NV1

Closing Date:

10.00am, Friday 28 August 2026

Essential Tasks:

• Contribute security considerations to solution design and develop security requirements.
• Develop communications and documentation to support senior executive decision-making.
• Coordinate security assurance activities, including IRAP and penetration testing.
• Lead the development of formal cyber security documentation.

Key Criteria:

• Knowledge of the Information Security Manual, Protective Security Policy Framework and Essential Eight.
• Demonstrated experience and capability performing a cyber security GRC role.
• Demonstrated experience managing stakeholder or client interactions to achieve outcomes.
• Demonstrated experience developing GRC documentation.

YOUR APPLICATION WILL BE TREATED WITH THE STRICTEST CONFIDENCE:

Due to the nature of this environment, candidates must hold a current NV1 clearance.