Senior Cyber Security Governance Analyst

About this role

Senior Cyber Security Governance Analyst | Canberra

📌 Role Details

🇦🇺 Eligibility: Australian Government environment; candidate must be eligible to obtain the required clearance

🔐 Security Clearance: Must be able to obtain Negative Vetting Level 1 (NV1)

📍 Location: Canberra / ACT

🏠 Work Arrangement: Full-time onsite; temporary work-from-home arrangements may be considered case-by-case

💼 Employment Type: Contract

⏳ Contract Duration: 12 months initial term + potential 12-month extension

📅 Start Date: 1 September 2026

🎯 Experience: Senior level / APS6 equivalent; 5+ years of relevant experience desirable

⏱️ Hours: Up to 45 hours per week; extended hours and weekend work may be required during key operational periods

🔐 About the Role

A senior Cyber Security Governance, Risk and Compliance (GRC) professional is required to support a major Australian public-sector cyber resilience uplift program.

The role will contribute to cyber security governance and assurance activities, with additional support for high-priority operational requirements during key event periods.

🛡️ Key Responsibilities

• Contribute to security considerations within solution design
• Review and recommend appropriate cyber security requirements
• Develop high-quality communications and documentation for senior executive decision-making
• Support the coordination of security assurance activities, including IRAP assessments and penetration testing
• Lead the development and maintenance of formal cyber security and GRC documentation
• Support cyber governance, risk and compliance activities across the program
• Work closely with technical teams, business stakeholders and assurance functions
• Provide practical security advice and recommendations to support program outcomes

🎯 Essential Skills & Experience

• Strong knowledge of the Information Security Manual (ISM)
• Strong understanding of the Protective Security Policy Framework (PSPF)
• Knowledge and practical understanding of the Essential Eight
• Demonstrated experience performing a Cyber Security GRC role
• Demonstrated capability managing stakeholder and client relationships to achieve outcomes
• Demonstrated experience developing GRC and cyber security documentation
• Strong written and verbal communication skills
• Ability to work effectively in a senior, complex and delivery-focused environment

⭐ Desirable

• Minimum 5 years' experience in cyber security, GRC, risk, assurance or related roles
• Experience within Australian Government or similarly regulated environments
• Experience supporting security assurance activities such as IRAP and penetration testing
• Experience working on cyber resilience or security uplift programs
• Experience supporting high-priority operational or event-driven environments

📩 *Apply Now*If your background aligns with the above requirements, please connect or message me to discuss the opportunity.

For further information, please contact the eSync Solutions team at info@esync.com.au or connect with us via LinkedIn.

About cyber security & digital forensics roles for ex-police

Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.