Senior Cyber Security Governance Analyst

Exclaim IT; Canberra; On-site; AUD 120,000 - 150,000; Full time

Job summary

Exclaim IT seeks a Senior Cyber Security Governance Analyst to support a government organisation in Canberra, focusing on governance, risk and compliance during a resilience uplift programme. The role is senior (APS6 level), onsite in Canberra with potential case-by-case WFH arrangements and extended hours during elections.

You will contribute to security assurance, governance documentation, and stakeholder engagement, delivering high-quality guidance for executive decisions.

Qualifications

• Minimum 5 years of experience in cyber security, governance, risk or related roles.
• Experience in Australian Government environments is preferred.
• Ability to obtain Negative Vetting Level 1 security clearance.

Responsibilities

• Contribute to solution design with cyber security requirements and controls.
• Review and recommend improvements to security requirements.
• Develop high quality communications and governance documentation for executives.
• Coordinate security assurance activities including IRAP assessments and testing.
• Lead the development of formal cyber security governance, risk and compliance documentation.
• Support cyber security GRC as part of a resilience uplift program.
• Provide cyber security support for election-specific requirements during events.
• Engage with stakeholders to achieve security and governance outcomes.

Skills

Governance & risk

Risk management

Compliance

IRAP assessments

Penetration testing

Stakeholder engagement

Documentation

Security clearance NV1

Job description

We are seeking a Senior Cyber Security Governance Analyst to join a government organisation supporting cyber security governance, risk and compliance activities as part of a major resilience uplift program.

This is a senior role, equivalent to APS6, supporting cyber security activities across the organisation and providing additional support during key electoral events. The role will contribute to security assurance, governance documentation, stakeholder engagement and security requirements.

The position is based in Canberra and is full time onsite. Temporary work from home arrangements may be considered on a case by case basis. Extended hours and weekend work will be required during key event periods.

Key responsibilities

• Contribute to solution design with consideration of cyber security requirements and controls
• Review and provide recommendations to develop and improve security requirements
• Develop high quality communications and documentation to support senior executive decision making
• Support the coordination of security assurance activities, including IRAP assessments and penetration testing
• Lead the development of formal cyber security governance, risk and compliance documentation
• Support cyber security GRC activities as part of a broader resilience uplift program
• Provide cyber security support for election specific requirements during electoral events
• Engage with stakeholders and clients to achieve security and governance outcomes

Highly desirable criteria

• Strong knowledge and practical understanding of the Information Security Manual, Protective Security Policy Framework and Essential Eight
• Demonstrated experience working in a cyber security Governance, Risk and Compliance role
• Demonstrated experience managing stakeholder and client relationships to achieve successful outcomes
• Demonstrated experience developing high quality GRC documentation
• Ability to obtain and maintain Negative Vetting Level 1 security clearance
• Minimum 5 years' experience in cyber security, governance, risk, compliance or related roles
• Experience working within Australian Government environments
• Experience supporting security assurance activities such as IRAP assessments and penetration testing
• Experience developing documentation and advice for senior executives

Skills and experience

• The successful candidate will have strong cyber security governance and risk experience, with the ability to translate security requirements into practical advice, documentation and outcomes.
• Strong understanding of Australian Government cyber security frameworks and standards
• Proven experience in cyber security GRC
• Strong written communication and documentation skills
• Excellent stakeholder engagement and relationship management capabilities
• Experience supporting security assurance and risk management activitiesThe ability to work independently and manage competing priorities in a fast paced environment
• Strong attention to detail and the ability to convey complex security matters clearly
• The ability to work onsite in Canberra and support extended hours and weekend requirements during key event periods