Sr. Cyber Security Governance Analyst- NV1

XPT Software; Canberra; On-site; AUD 140,000 - 190,000; Full time

Job summary

XPT Software is seeking a Senior Cyber Security Governance Analyst to support the Australian Electoral Commission's resilience uplift program. The role focuses on cyber security GRC activities and may assist with election-specific requirements during electoral events.

You will contribute to security design, develop requirements, and prepare communications for senior executives while coordinating security assurance processes such as IRAP and penetration testing, and leading the creation of formal

Qualifications

• Knowledge of the Information Security Manual, Protective Security Policy Framework and Essential Eight.
• Demonstrated experience in a cyber security GRC role.
• Experience managing stakeholder or client interactions to achieve outcomes.
• Experience developing GRC documentation.

Responsibilities

• Contributing to solution design for security considerations.
• Review and provide recommendations to develop security requirements.
• Develop communications and documentation for senior executive decision making.
• Support the coordination of security assurance processes including IRAP and penetration testing.
• Lead the development of formal security documentation.

Skills

Information Security Manual

GRC role experience

Stakeholder management

GRC documentation development

Job description

Senior Cyber Security Governance Analyst

Security clearance

Must be able to obtain Negative Vetting Level 1

Job details

This role will support the cyber security GRC activities for the AEC’s resilience uplift program and will report to AEC Cyber Security. During an electoral event, this role will additionally support any election specific requirements.

Key duties and responsibilities

• Contributing to solution design for security considerations;
• Review and provide recommendations to develop security requirements;
• Develop communications and documentation for senior executive decision making;
• Support the coordination of security assurance processes including IRAP and penetration testing;
• Lead the development of formal security documentation.

Criteria

Essential criteria

• 1. Knowledge of the Information Security Manual, Protective Security Policy Framework and Essential Eight
• 2. Demonstrated experience and capability performing a cyber security GRC role.
• 3. Demonstrated experience managing stakeholder or client interactions to achieve an outcome.
• 4. Demonstrated experience in developing GRC documentation

Desirable criteria

• 1. Minimum 5 years experience in related roles