Senior Cyber Security Governance Analyst

Recruitment Sorted Pty Ltd; Canberra; On-site; AUD 140,000 - 190,000; Full time

Job summary

Recruitment Sorted Pty Ltd on behalf of our client seeks a Senior Cyber Security Governance Analyst to lead governance, risk and compliance activities in Canberra. The role requires NV1 clearance, is onsite in ACT, and is initially for 12 months with extension.

You will develop security documentation, perform risk assessments and coordinate IRAP and penetration testing. The ideal candidate will bring senior stakeholder engagement skills, articulate executive communications, and a proven track

Qualifications

• Must hold a Negative Vetting Level 1 (NV1) security clearance.
• Knowledge of the Information Security Manual, Protective Security Policy Framework and Essential Eight.
• Demonstrated experience and capability performing a cyber security GRC role.
• Demonstrated experience managing stakeholder or client interactions to achieve an outcome.
• Demonstrated experience in developing GRC documentation.

Responsibilities

• Contributing to solution design for security considerations.
• Review and provide recommendations to develop security requirements.
• Develop communications and documentation for senior executive decision making.
• Support the coordination of security assurance processes including IRAP and penetration testing.
• Lead the development of formal security documentation.

Skills

GRC governance

Security governance

Stakeholder management

Executive communications

IRAP coordination

Penetration testing coordination

Job description

Job Description

Job Title: Senior Cyber Security Governance Analyst

Security Clearance: Negative Vetting Level 1 (NV1)

Duration: Initial 12 months with 1 x 12-month extension

Functional Expertise: Governance, Risk & Compliance (GRC)

Location of work: ACT

Working arrangements: Onsite

Closing date: 9AM Friday, 28 August 2026

Description

Our client is seeking a Senior Cyber Security Governance Analyst to support cyber security Governance, Risk and Compliance (GRC) activities. The role will contribute to security considerations, assurance processes and the development of security documentation, while supporting additional requirements as required.

Responsibilities

• Contributing to solution design for security considerations.
• Review and provide recommendations to develop security requirements.
• Develop communications and documentation for senior executive decision making.
• Support the coordination of security assurance processes including IRAP and penetration testing.
• Lead the development of formal security documentation.

Requirements

• Must hold a Negative Vetting Level 1 (NV1) security clearance.
• Knowledge of the Information Security Manual, Protective Security Policy Framework and Essential Eight.
• Demonstrated experience and capability performing a cyber security GRC role.
• Demonstrated experience managing stakeholder or client interactions to achieve an outcome.
• Demonstrated experience in developing GRC documentation.

Key Capabilities

• Cyber security Governance, Risk and Compliance (GRC).
• Security requirements development and review.
• Security assurance processes.
• IRAP and penetration testing coordination.
• Development of formal security documentation.
• Senior executive communications and documentation.
• Stakeholder and client interaction.
• Knowledge of the Information Security Manual, Protective Security Policy Framework and Essential Eight
• Demonstrated experience and capability performing a cyber security GRC role.
• Demonstrated experience managing stakeholder or client interactions to achieve an outcome.
• Demonstrated experience in developing GRC documentation
• Minimum 5 years' experience in related roles