APS6 Senior Cyber Security Governance Analyst

APS6 Senior Cyber Security Governance Analyst

Canberra, Australia Posted on 08/17/2026

• State/Province Australian Capital Territory
• Country Australia

Job Description

• Initial Contract Duration: 12 Months
• Extension term details: 12 Months
  
• Location: ACT
  
• Security Requirements: Must be able to obtain NegativeVetting Level 1.Candidates must be NV1 cleared prior to commencement. Therole requires access to classified information.
  
• Working Arrangements: Onsite
  Full time onsite. Temporary work from home arrangements willbe considered on a case-by-case basis. This is a surge role tied to thedelivery of electoral events. Extended hours and weekend work are requiredduring key event periods. Extensions are possible depending on proximity to thenext anticipated major federal electoral event.
  
• Maximum hours: The standard work pattern is 7.5hrs per day,Mon-Fri, equating to 37.5hrs per week. Additional hours may be required duringelectoral events or other period of heightened activity.45hrs per week isa notional maximum, when supported by operational requirements.

Job details. This role will support the cyber security GRC activities for the Department's resilience uplift program and will report to Department's Cyber Security. During an electoral event, this role will additionally support any election specific requirements.

Key duties and responsibilities

Within the program, the role will be responsible for various cyber functions, including but not limited to:

• Contributing to solution design for security considerations;
• Review and provide recommendations to develop security requirements;
• Develop communications and documentation for senior executive decision making;
• Support the coordination of security assurance processes including IRAP and penetration testing;
• Lead the development of formal security documentation.
• Knowledge of the Information Security Manual, Protective Security Policy Framework and Essential Eight
  
• Demonstrated experience and capability performing a cybersecurity GRC role.
  
• Demonstrated experience managing stakeholder or client interactions to achieve an outcome.
  
• Demonstrated experience in developing GRC documentation
• Minimum 5 years experience in related roles

Application Deadline: Monday, 24 August 2026

Expected Start Date: Tuesday, 01 September 2026
Job Type: Contract