Cyber GRC Analyst

Overview

Our client is a high-profile federal government agency.

This contract role will be undertaken in their Canberra office.

There will be no WFH, unless negotiated as most work must be undertaken on site.

This contract is being let for an initial 12 months, with an expected 12 month extension. (It is unlikely to go past 24 months.)

Experience level is APS6 level (so, mid-level).

This is a new role, so no incumbent leaving.

Security level - a current NV1 is required, at a minimum.

The Role & Key Duties

This role will support the client's resilience uplift program, and will be a part of the Cyber Security team.

The role will be responsible for various cyber functions, including:

• Contributing to solution design for security considerations;
• Review and provide recommendations to develop security requirements;
• Develop communications and documentation for senior executive decision making;
• Support the coordination of security assurance processes including IRAP and penetration testing;
• Lead the development of formal security documentation (eg, IRAP assessments and authorization reports).

Essential Experience

• Previous experience carrying out a GRC role, and within a public sector agency.
• Knowledge of the Information Security Manual, Protective Security Policy Framework and Essential Eight.
• Experience developing GRC documentation.
• Experience managing interactions with stakeholders (so not just working within the team).
• Experience in the management of IRAP assessments and pen testing (not doing).

Admin

This role should be quite interesting, and there is a good team in place.

We will be keeping this advertisement open until COB this Friday 21 August.

We will be reviewing candidate resumes progressively through this week, so if you have the security level, skills and experience required for this role, please do not delay in applying.