Sr. Cyber Security Governance Analyst- NV1

XPT Software Australia; Canberra; On-site; AUD 120,000 - 170,000; Full time

Job summary

XPT Software Australia is seeking a Senior Cyber Security Governance Analyst to support the AEC's resilience uplift program. You will report to the AEC Cyber Security team and, during electoral events, assist with election-specific requirements.

The role involves contributing to security design, reviewing requirements, developing executive communications, coordinating security assurance (IRAP and penetration testing), and leading formal security documentation.

Qualifications

• Knowledge of the Information Security Manual (ISM), Protective Security Policy Framework (PSPF) and Essential Eight.
• Demonstrated experience and capability performing a cyber security GRC role.
• Demonstrated experience managing stakeholder or client interactions to achieve an outcome.
• Demonstrated experience in developing GRC documentation.

Responsibilities

• Contribute to solution design for security considerations.
• Review and provide recommendations to develop security requirements.
• Develop communications and documentation for senior executive decision making.
• Support the coordination of security assurance processes including IRAP and penetration testing.
• Lead the development of formal security documentation.

Skills

ISM knowledge

PSPF knowledge

Essential Eight

GRC experience

Stakeholder management

Tools

IRAP framework

Penetration testing coordination

Job description

Senior Cyber Security Governance Analyst

Security clearance

Must be able to obtain Negative Vetting Level 1

Job details

This role will support the cyber security GRC activities for the AEC's resilience uplift program and will report to AEC Cyber Security. During an electoral event, this role will additionally support any election specific requirements.

Key Duties And Responsibilities

• Contributing to solution design for security considerations;
• Review and provide recommendations to develop security requirements;
• Develop communications and documentation for senior executive decision making;
• Support the coordination of security assurance processes including IRAP and penetration testing;
• Lead the development of formal security documentation.

Essential Criteria

• 1. Knowledge of the Information Security Manual, Protective Security Policy Framework and Essential Eight
• 2. Demonstrated experience and capability performing a cyber security GRC role.
• 3. Demonstrated experience managing stakeholder or client interactions to achieve an outcome.
• 4. Demonstrated experience in developing GRC documentation

Desirable criteria

• 1. Minimum 5 years experience in related roles