Senior Cyber Security Governance Analyst

Role summary

Senior Cyber Security Governance Analyst is a full-time role at GoSourcing Pty Ltd in Canberra, Australia (hybrid). Posted 2026-08-16. Experience level: 5-10.

Job title

Senior Cyber Security Governance Analyst

Company

GoSourcing Pty Ltd

Location

Canberra, Australia

Work arrangement

hybrid

Employment type

full-time

Category

Cybersecurity

Experience level

5-10

Date posted

2026-08-16

Job description

Federal Gov't Agency client is seeking a Senior Cyber Security Governance Analyst .Th work of the agency is central to public trust, and this role contributes to strengthening the cyber security governance, risk, and compliance practices that support that mission.

As a Senior Cyber Security Governance Analyst, you will help advance cyber security governance activities that support the agency’s resilience uplift program. This role offers the opportunity to contribute to important risk and compliance outcomes in a high-accountability environment, while supporting business and security stakeholders on matters that are critical to election readiness and operational resilience.

Estimated start date 01 Sept 2026

Initial contract duration 12 months

Extension term 1

Number of extensions 1

Experience level APS6

Location of work ACT Full time onsite. Temporary work from home arrangements will be considered on a case-by-case basis. This is a surge role tied to the delivery of electoral events. Extended hours and weekend work are required during key event periods.

Security clearance Must be Australian Citizen and able to obtain Negative Vetting Level 1

Responsibilities Contributing to solution design for security considerations;

Review and provide recommendations to develop security requirements;

Develop communications and documentation for senior executive decision making;

Support the coordination of security assurance processes including IRAP and penetration testing;

Lead the development of formal security documentation.

Criteria The buyer has specified that each candidate must provide a one page pitch to address all criteria specified. This is equal to 5000 characters.

Essential criteria Knowledge of the Information Security Manual, Protective Security Policy Framework and Essential Eight

Demonstrated experience and capability performing a cyber security GRC role.

Demonstrated experience managing stakeholder or client interactions to achieve an outcome.

Demonstrated experience in developing GRC documentation

Desirable criteria Minimum 5 years experience in related roles