Cyber Security Analyst – Hybrid (Canberra)

About the role

The Cyber Security Analyst will ensure departmental systems comply with Australian Government security standards such as PSPF, ISM and the Essential Eight. You will provide pragmatic security advice to senior executives and business stakeholders while working in a hybrid environment.

Key responsibilities

• Conduct comprehensive risk and impact assessments, develop treatment plans and mitigation strategies across the department.
• Establish, refine and implement assurance frameworks and controls aligned with PSPF, ISM, NIST and other regulatory standards.
• Develop, review and update cybersecurity policies, standards and SOPs to meet federal governance mandates.
• Design and execute security audits, monitor remediation activities by system and business owners.
• Maintain documentation for accreditation and certification activities and support ongoing risk remediation.

Required profile

• Australian citizenship.
• Baseline security clearance.
• Experience in governance, risk and compliance (GRC) within a government or regulated environment.
• Ability to work both on‑site and remotely in a hybrid arrangement.

Required skills

• PSPF framework.
• ISM (Information Security Manual).
• Essential Eight mitigation strategies.
• NIST cybersecurity framework.
• Risk assessment and impact analysis.
• Security audit design and execution.
• Accreditation and certification documentation.
• GRC (Governance, Risk, Compliance) processes.

What we offer

• Hybrid work arrangement.
• Fixed‑term contract until June 2027.
• Opportunity to work with Randstad Digital, a global talent solutions leader.