Senior Cyber Security Governance Analyst

CYOS Solutions; Canberra; On-site; AUD 138,000 - 165,000; Full time

Job summary

CYOS Solutions in Canberra, ACT is seeking an experienced cyber security GRC professional for a 12-month surge role, full-time onsite. The position will support the Australian Electoral Commission's resilience uplift program and cover election-specific requirements during events. This role offers $100-$120 per hour (inc.

super) and requires Baseline clearance. Start date is 01 September 2026 with an applications close date of 27 August 2026.

Qualifications

• GRC experience and knowledge related to security governance, risk management, and compliance.
• Ability to document security requirements and controls for governance.
• Experience engaging stakeholders to achieve outcomes in security projects.
• Familiarity with policy frameworks and security standards.

Responsibilities

• Contribute to solution design for security considerations.
• Review and provide recommendations to develop security requirements.
• Develop communications and documentation for senior executive decision making.
• Support security assurance processes including IRAP and penetration testing.
• Lead the development of formal security documentation.

Skills

GRC experience

GRC documentation

Stakeholder management

Security policies

Job description

Application closing date: Thursday, 27 August 2026 11:59pm, Canberra time

Estimated start date: Tuesday, 01 September 2026

Location of work: ACT

Working arrangements: Full time onsite. Temporary work from home arrangements will be considered on a case-by-case basis. This is a surge role tied to the delivery of electoral events.

Length of contract: 12 months

Contract extensions: 12 months

Security clearance: Must hold an active Baseline clearance

Rates: $100 - $120 per hour (inc. super)

This role will support the cyber security GRC activities for the Australian Electoral Commission's (AEC) resilience uplift program and will report to AEC Cyber Security. During an electoral event, this role will additionally support any election specific requirements.

Key duties and responsibilities:

Within the program, the role will be responsible for various cyber functions, including but not limited to:

• Contributing to solution design for security considerations;
• Review and provide recommendations to develop security requirements;
• Develop communications and documentation for senior executive decision making;
• Support the coordination of security assurance processes including IRAP and penetration testing;
• Lead the development of formal security documentation.

Essential criteria

1. Knowledge of the Information Security Manual, Protective Security Policy Framework and Essential Eight
2. Demonstrated experience and capability performing a cyber security GRC role.
3. Demonstrated experience managing stakeholder or client interactions to achieve an outcome.
4. Demonstrated experience in developing GRC documentation

Desirable criteria

1. Minimum 5 years experience in related roles