Start searching
Back to Jobs
Recently postedFull timeAdministrative

M365 Security GRC

Compas Pty LtdCanberra, Australian Capital Territory🇦🇺Australia

Quick overview

SeniorityMid Senior
Employment typeFull Time
Work modeHybrid
LocationCanberra, Australian Capital Territory, Australia
Microsoft Office

Job description

Job Title: Cyber GRC Analyst Microsoft 365 Security Support the delivery of a secure external collaboration platform within a complex Australian Government environment. This Cyber GRC Analyst role focuses on Microsoft 365 security, cyber risk assessments, governance and compliance, and security documentation to achieve Authority to Operate (ATO). Work across Microsoft Purview, Entra ID and Defender to support secure collaboration and information protection.

Location: ACT
Contract Duration: ASAP start through to June 2027
Security Clearance Requirement: NV1
Closing Date: 10:00am, 29 October 2026

Essential Tasks:

  • Develop security documentation packs, including System Security Plans, risk management plans, continuous monitoring plans and incident response plans to support ATO.
  • Lead technical cyber risk assessments across Microsoft 365 environments, identifying vulnerabilities, mitigating risks and recommending security improvements.
  • Implement and manage security controls across Microsoft Purview, Entra ID and Defender, including role-based access control (RBAC) and Conditional Access.
  • Ensure alignment with the ISM, Essential Eight, DSPF, PSPF and ASD's Blueprint for Secure Cloud, while engaging security assurance stakeholders.

Key Criteria:

  • Strong experience in cyber security governance, risk and compliance (GRC), security assessments and security accreditation processes.
  • Experience implementing, securing and hardening Microsoft 365 environments, including Entra ID, Microsoft Defender and Purview.
  • Knowledge of identity and access management, Privileged Identity Management (PIM), Conditional Access and external B2B collaboration.
  • Understanding of data protection, sensitivity labels, Data Loss Prevention (DLP), security policy governance and relevant Australian Government security frameworks.

About Compas: Compas Pty Ltd is a Canberra based wholly Australian owned, Recruitment and Services company that has been operating since 1987. We specialise in the provision of permanent, contract and temporary recruitment services, as well as specialised Consulting assignments.

YOUR APPLICATION WILL BE TREATED WITH THE STRICTEST CONFIDENCE:Due to the nature of this environment, candidates must hold a current NV1 clearance.

Similar jobs

Apply