Cyber Security GRC Analyst

About this role

We are seeking an experienced Cyber Security GRC professional looking to join our team for an initial 12 month contract or permanent basis. This position will require you to play a key role in strengthening the cyber resilience of a large and complex government environment and support the delivery of a major cyber resilience uplift program. This is an opportunity to work across governance, risk and compliance activities, contribute to security assurance initiatives, and help shape security outcomes within a highly regulated environment.

As a Senior Cyber Security Governance Analyst, you will work closely with cyber security, project, and business stakeholders to ensure security requirements are effectively incorporated into technology and business initiatives.

Key responsibilities include

• Contributing to solution design from a cyber security perspective.
• Reviewing and developing security requirements.
• Preparing executive-level communications, reports, and decision papers.
• Manage and support security assurance activities, including coordination of IRAP assessments and penetration testing engagement.
• Developing and maintaining formal security documentation and governance artefacts that support an IRAP assessment (SSP, SRMP, SSP, SoA).
• Working with stakeholders to manage security risks and compliance obligations.
• Supporting organisational cyber resilience initiatives and project delivery activities.

Essential Skills and Experience

To be successful in this role, you should demonstrate

• Strong knowledge of the Australian Government Information Security Manual (ISM), Protective Security Policy Framework (PSPF), and Essential Eight.
• Proven experience performing Cyber Security Governance, Risk and Compliance (GRC) functions.
• Excellent stakeholder engagement and relationship management skills.
• Experience developing security governance and compliance documentation.
• Strong written communication skills with the ability to produce executive-level documentation and reports.

Further Experience

• 5+ years' experience in cyber security, information security, risk, compliance, governance, or related disciplines.
• Experience supporting security assessments, accreditation activities, or assurance programs.
• Experience producing artefacts such as Security Risk Management Plans (SRMPs), System Security Plans (SSPs), security authorisation documentation, or similar.
• Previous experience working in government, regulated industries, or large enterprise environments.

Mandatory Requirements

• Current Negative Vetting Level 1 (NV1) Security Clearance.
• Australian Citizenship.
• Ability to work onsite in Canberra (ACT).

About cyber security & digital forensics roles for ex-police

Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.