Senior Cyber Security Governance Analyst

About this role

Application closing date: Thursday, 27 August 2026 • 11:59pm, Canberra time

Estimated start date: Tuesday, 01 September 2026

*Working arrangements:*Full time onsite. Temporary work from home arrangements will be considered on a case-by-case basis. This is a surge role tied to the delivery of electoral events.

Length of contract: 12 months

Contract extensions: 12 months

Security clearance: Must hold an active Baseline clearance

Rates: $100 - $120 per hour (inc. super)

This role will support the cyber security GRC activities for the Australian Electoral Commission's (AEC) resilience uplift program and will report to AEC Cyber Security. During an electoral event, this role will additionally support any election specific requirements.

Key duties and responsibilities

Within the program, the role will be responsible for various cyber functions, including but not limited to:

• Contributing to solution design for security considerations;
• Review and provide recommendations to develop security requirements;
• Develop communications and documentation for senior executive decision making;
• Support the coordination of security assurance processes including IRAP and penetration testing;
• Lead the development of formal security documentation.

Essential**criteria

• Knowledge of the Information Security Manual, Protective Security Policy Framework and Essential Eight
• Demonstrated experience and capability performing a cyber security GRC role.
• Demonstrated experience managing stakeholder or client interactions to achieve an outcome.
• Demonstrated experience in developing GRC documentation

Desirable criteria

• Minimum 5 years experience in related roles

HOW TO APPLY

Please provide an updated CV (a maximum of 3 pages) to reflect your suitability to the role based on the job description. You will also need to complete responses to the essential and desirable criteria which is no more than 5000 characters for each response. Your application will be reviewed based on ability to demonstrate, or potential to develop, the capabilities required.

About cyber security & digital forensics roles for ex-police

Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.