Cyber Governance, Risk and Compliance Analyst

About the role

Metrea is seeking a motivated Cybersecurity Governance, Risk and Compliance (GRC) Analyst to support and maintain cybersecurity governance and assurance activities within a classified Microsoft Azure environment. The role ensures security compliance of critical classified systems in line with Australian Government frameworks.

Key responsibilities

• Develop, review, maintain and update cybersecurity governance and accreditation documentation such as System Security Plans (SSP), Security Risk Management Plans (SRMP), POA&Ms and risk assessments.
• Support system accreditation and re‑accreditation activities within classified environments and ensure ongoing compliance with ISM, PSPF, Essential Eight and organisational security requirements.
• Conduct security compliance reviews, audits and assurance assessments, identify and manage cybersecurity risks and control gaps, and monitor remediation activities.
• Provide cybersecurity advice to program security meetings, governance forums and project reviews, and participate in investigations of incidents and compliance breaches.
• Maintain evidence repositories, deliver compliance reporting, and provide training and awareness to system users.

Required profile

• Extensive experience in cybersecurity governance, risk and compliance or related information security roles.
• Experience working in government, defence, critical infrastructure or highly regulated environments, preferably with systems classified at PROTECTED level.
• Demonstrated ability to apply ISM and PSPF requirements and develop documentation for IRAP assessments.
• Strong analytical, critical thinking and communication skills, with high integrity and professionalism.

Required skills

• Microsoft Azure (including Azure Fundamentals – AZ‑900).
• Australian Government security frameworks: ISM, PSPF, Essential Eight, IRAP.
• Security accreditation documentation: SSP, SRMP, POA&M.
• Risk assessment and management, security audit and compliance reporting.

What we offer

• Private health insurance.
• Generous annual leave.
• Annual incentive plan.
• Paid parental leave.