Senior Cyber Compliance & Assurance Specialist

About the role

Airservices Australia, a government-owned organisation responsible for a large share of Australia's airspace and aviation rescue fire fighting services, is looking for a Senior Cyber Compliance & Assurance Specialist to join its Technology Strategy, Assurance & Cyber team. The role supports enterprise-wide security governance, including the secure-by-design process, engagement with commercial delivery partners and cyber design and assurance outcomes. It is a full-time permanent position based in the ACT or Brisbane.

Key responsibilities

• Lead and support cyber security governance, risk management, compliance and assurance across IT, operational technology (OT), cloud and critical infrastructure environments.
• Conduct and oversee security assurance activities supporting system accreditation, Authorisation to Operate (ATO), reassessment and ongoing compliance.
• Lead cyber security risk assessments and compliance reviews for new and existing systems, projects and services.
• Maintain cyber security risk registers, treatment plans and risk acceptance artefacts.
• Review vendor, supplier and service provider security documentation against contractual, regulatory and security requirements.
• Plan, coordinate and take part in audits, compliance assessments, IRAP activities and regulatory reviews, managing findings and remediation.
• Monitor compliance with the Information Security Manual (ISM), Protective Security Policy Framework (PSPF), Security of Critical Infrastructure Act (SOCI), Privacy Act and aviation obligations.
• Advise on preventative, detective and corrective controls and support GRC platforms and tooling.

Required profile

• Significant experience in cyber security governance, risk management, compliance and assurance in complex enterprise, government, critical infrastructure or regulated environments.
• Experience managing audit activities, remediation programs and compliance improvement initiatives.
• Relevant degree or industry qualification (e.g. CRISC, CISSP, CISM, IRAP Assessor, ISO 27001 Lead Auditor, ISO 27001 Lead Implementer, SABSA, FAIR).
• Must be an Australian citizen eligible to obtain and maintain an Australian Government Security Vetting Agency (AGSVA) Negative Vetting Level 1 (NV1) clearance.

Required skills

• Frameworks such as ISO 27001, NIST CSF, CIS Controls and IRAP assessment processes.
• Strong knowledge of ISM, PSPF and Essential Eight.
• GRC platforms such as ServiceNow IRM/GRC, Archer or MetricStream.
• Well-developed written and oral communication skills.

Applications are submitted online through the Airservices website before 11:55 pm AEST on 12 November 2026.