Senior Cyber Security Governance Analyst

Vertali APAC Pty Ltd; Canberra; On-site; AUD 166,000 - 221,000; Full time

Job summary

Vertali APAC Pty Ltd is seeking a Senior Cyber Security Governance Analyst for a 12-month contract. The role, based in Canberra and on site, supports cyber security GRC activities within a resilience uplift program for a Federal Government Department.

Mandatory Australian citizenship with Baseline or NV1 clearance (CS ID) is required, plus 5+ years local experience. The assignment begins around Sept/Oct 2026, with a standard 45-hour week.

Qualifications

• 5+ years of local experience in cyber security governance or GRC roles.
• Australian citizenship with Baseline clearance or NV1 with CS ID.
• Experience developing security documentation for IRAP assessments.

Responsibilities

• Contribute to solution design for security considerations.
• Review and advise on security requirements.
• Develop communications and documentation for senior executive decisions.
• Coordinate security assurance processes including IRAP and penetration testing.
• Lead the development of formal security documentation.

Skills

Cyber security

GRC

IRAP

Stakeholder management

Documentation

Tools

SSP

SRMP

Job description

Our client, a Federal Government Department, is looking for an

Senior Cyber Security Governance Analyst for a contract role with an initial 12-month engagement.This role will support the cyber security GRC activities for the resilience uplift program.

The right candidate must be located in Canberra, full time work onsite.

Note.

1. MANDATORY, all candidates must be an Australian citizen and hold a current Baseline clearance OR a current NV1 clearance and their AGSVA Clearance Subject (CS) ID.
2. The candidate must provide a one page pitch to address all criteria specified. This is equal to 5000 characters.
3. Have at least 5+ year's relevant local working experience in the field.

Key duties and responsibilities

Within the program, the role will be responsible for various cyber functions, including but not limited to:

• Contributing to solution design for security considerations;
• Review and provide recommendations to develop security requirements;
• Develop communications and documentation for senior executive decision making;
• Support the coordination of security assurance processes including IRAP and penetration testing;
• Lead the development of formal security documentation.

Criteria

The buyer has specified that each candidate must provide a one page pitch to address all criteria specified. This is equal to 5000 characters.

Essential criteria

• Knowledge of the Information Security Manual, Protective Security Policy Framework and Essential Eight
• Demonstrated experience and capability performing a cyber security GRC role.
• Demonstrated experience managing stakeholder or client interactions to achieve an outcome.
• Demonstrated experience in developing GRC documentation
• The candidate will be required to develop (including but not limited to) the security documentation required to support an IRAP assessment (SSP, SRMP, SSP Annex - formerly SoA, etc.), as well as authorisation reports and minutes.

Desirable criteria

• Minimum 5 years experience in related roles

Notes:

1. Your daily rate will depend on skills, experience.
2. Start date for this assignment is anticipated to be the beginning Sept/Oct 2026.
3. Full time requirement, standard hours per day (Maximum hours45 hours per week).