Senior Cyber Security Governance Analyst

Senior Cyber Security Governance Analyst – Federal Government
📍 Location: Canberra, ACT – Onsite⏳ Contract Duration: 12 months + potential 12-month extension💼 Industry: Federal Government / Cyber Security🔒 Security Requirement: Current NV1 Security Clearance or higher required🕐 Engagement: Full-time Labour Hire Contract
About the OpportunityHatchit Studios is seeking an experienced Senior Cyber Security Governance Analyst for a long-term labour hire opportunity supporting a major Australian Federal Government agency.
The successful candidate will support cyber security Governance, Risk and Compliance (GRC) activities as part of a significant resilience uplift program. The role will work closely with cyber security teams, business stakeholders and external assurance providers to strengthen security governance, assurance and compliance outcomes.
This is a Canberra-based role requiring an onsite presence. Temporary work-from-home arrangements may be considered on a case-by-case basis.
Key ResponsibilitiesSupport cyber security Governance, Risk and Compliance (GRC) activitiesContribute security considerations and requirements to solution designReview and provide recommendations for the development of security requirementsDevelop formal security and GRC documentationPrepare communications, reports and documentation to support senior executive decision-makingCoordinate security assurance activities, including IRAP assessments and penetration testing undertaken by external providersSupport the management of assurance findings and remediation activitiesDevelop security documentation supporting IRAP and security authorisation processes, including System Security Plans (SSPs), Security Risk Management Plans (SRMPs), SSP Annexes and authorisation documentationEngage with technical teams, business stakeholders and external security providers to achieve security and compliance outcomesSupport additional cyber security requirements during key operational and electoral event periods
Skills & Experience RequiredStrong knowledge of the Australian Government Information Security Manual (ISM)Strong understanding of the Protective Security Policy Framework (PSPF)Knowledge and practical application of the Essential EightDemonstrated experience performing a Cyber Security GRC roleExperience developing formal cyber security governance, risk, assurance and compliance documentationStrong stakeholder and client engagement skills with demonstrated ability to drive outcomesExperience supporting security assurance, accreditation or authorisation activitiesStrong written communication skills, including the ability to prepare documentation for senior stakeholdersIdeally 5+ years' experience across cyber security, governance, risk, compliance or related rolesPrevious Commonwealth Government cyber security experience will be highly regarded
Security & Location RequirementsCandidates must:Hold a current NV1 security clearance or higherBe able to work onsite in Canberra, ACTBe available for full-time engagementBe prepared to work additional hours or weekends during occasional periods of heightened operational activity
The standard working pattern is 37.5 hours per week, with additional hours potentially required during electoral events or other periods of heightened activity.
Why Consider This Opportunity?Long-term 12-month Federal Government engagementPotential additional 12-month extensionWork on a significant cyber security resilience uplift programExposure to Commonwealth security governance, assurance and authorisation activitiesWork alongside experienced government cyber security professionals and specialist external assurance providersCompetitive market rates