Senior Cyber Security Governance Analyst

Vertali; Canberra; On-site; AUD 129,000 - 166,000; Full time

Job summary

Vertali is seeking a Senior Cyber Security Governance Analyst for a 12-month contract. The role is based in Canberra and is full-time on-site. Mandatory Australian citizenship with Baseline or NV1 clearance required.

The incumbent will support cyber security GRC activities within the resilience uplift program and produce security documentation for IRAP assessments. The successful candidate will have 5+ years of local experience, develop SSPs and SRMPs, and lead security documentation efforts for

Qualifications

• Knowledge of Information Security Manual, PSPF and Essential Eight.
• Demonstrated experience in cyber security GRC roles.
• Experience managing stakeholder or client interactions.
• Ability to develop GRC documentation for IRAP and security assurance.
• Minimum 5 years in related roles.

Responsibilities

• Contribute to security design considerations within the program.
• Review and recommend security requirements.
• Develop communications and documentation for executives.
• Coordinate security assurance processes including IRAP and pen tests.
• Lead development of formal security documentation.

Skills

GRC

Stakeholder management

Security documentation

IRAP

Essential Eight

Policy governance

Job description

Our client, a Federal Government Department, is looking for a Senior Cyber Security Governance Analyst for a contract role with an initial 12-month engagement. This role will support the cyber security GRC activities for the resilience uplift program. The right candidate must be located in Canberra, full time work onsite.

Note.

• MANDATORY, all candidates must be an Australian citizen and hold a current Baseline clearance OR a current NV1 clearance and their AGSVA Clearance Subject (CS) ID.
• The candidate must provide a one page pitch to address all criteria specified. This is equal to 5000 characters.
• Have at least 5+ year's relevant local working experience in the field.

Key duties and responsibilities

Within the program, the role will be responsible for various cyber functions, including but not limited to:

• Contributing to solution design for security considerations;
• Review and provide recommendations to develop security requirements;
• Develop communications and documentation for senior executive decision making;
• Support the coordination of security assurance processes including IRAP and penetration testing;
• Lead the development of formal security documentation.

Criteria

The buyer has specified that each candidate must provide a one page pitch to address all criteria specified. This is equal to 5000 characters.

• Knowledge of the Information Security Manual, Protective Security Policy Framework and Essential Eight
• Demonstrated experience and capability performing a cyber security GRC role.
• Demonstrated experience managing stakeholder or client interactions to achieve an outcome.
• Demonstrated experience in developing GRC documentation
• The candidate will be required to develop (including but not limited to) the security documentation required to support an IRAP assessment (SSP, SRMP, SSP Annex - formerly SoA, etc.), as well as authorisation reports and minutes.
• Minimum 5 years experience in related roles

Notes:

• Your daily rate will depend on skills, experience.
• Start date for this assignment is anticipated to be the beginning Sept/Oct 2026.
• Only shortlisted candidates will be contacted.
• Full time requirement, standard hours per day (Maximum hours 45 hours per week).