Senior Cyber Security Governance Analyst – GRC | NV1 | Canberra On-site

Senior Cyber Security Governance Analyst

Australian citizenship required. Must have an active Negative Vetting Level 1 (or higher) security clearance.

Location: ACT (Onsite).

What to Submit

1. A tailored resume in docx format (strictly 3 pages max)
2. A one page (5000 character) summary response to the selection criteria below.

RFQ Details

• RFQ ID: LH-07441
• Agency: Australian Electoral Commission
• Closing Date: Friday, 28 August 2026 at 11:59pm Canberra time
• Estimated Start Date: Tuesday, 1 September 2026
• Initial Contract Duration: 12 months
• Extension Term: 12 months
• Number of Extensions: 1
• Experience Level: Senior – APS6 equivalent
• Security Clearance: Must hold NV1 before commencement
• Location of Work: ACT
• Working Arrangements: Full-time onsite. Temporary work-from-home arrangements may be considered on a case-by-case basis.
• Maximum Hours: 45 hours per week. The standard work pattern is 7.5 hours per day, Monday to Friday, with additional hours and weekend work required during key electoral event periods.

Job Details

This role will support cyber security governance, risk and compliance activities for a resilience uplift program. During an electoral event, the role will also support election-specific requirements.

Key Duties and Responsibilities

• Contributing to solution design for security considerations;
• Review and provide recommendations to develop security requirements;
• Develop communications and documentation for senior executive decision making;
• Support the coordination of security assurance processes including IRAP and penetration testing;
• Lead the development of formal security documentation.

Technical Skills

• Information Security Manual
• Protective Security Policy Framework
• Essential Eight
• Cyber security governance, risk and compliance
• Security assurance processes, including IRAP and penetration testing
• Development of formal GRC documentation

Selection Criteria

Essential criteria

1. Knowledge of the Information Security Manual, Protective Security Policy Framework and Essential Eight
2. Demonstrated experience and capability performing a cyber security GRC role.
3. Demonstrated experience managing stakeholder or client interactions to achieve an outcome.
4. Demonstrated experience in developing GRC documentation

Desirable criteria

1. Minimum 5 years experience in related roles

Why choose Pinaka

We know the government ICT market and we keep things straightforward. We take time to understand your background, your goals and the type of role that suits you. We believe transparency is about more than rates and our margins are fair and always disclosed.

What you can expect from us...

1. Fair, disclosed margins
2. Clear communication at every stage
3. Honest advice on fit and competitiveness
4. Visibility on submissions and process status
5. A professional and respectful experience

How you are paid...

You choose what's best for you.

1. PAYG through Pinaka
2. Third-party payroll
3. Self-employed (own ABN)
   With a single, transparent and fixed margin, we ensure compliance to all state and payroll laws. So that is one less thing for you to worry about.

BYO CONTRACT

Already in a role but not happy with the setup?
Port in your contract to Pinaka for a simpler and more transparent experience. We also have some exciting limited time offers on top of the incredible margins we offer.

BETTER TOGETHER ™

Our referral program for people who introduce strong candidates to us.
Refer a friend - Earn $1/hr per successful referral as long as you both with us. Refer as many friends as you want; no caps.