Senior Cyber Security Analyst
Posted Updated
Summary
Contract role (12 months + extensions) supporting cyber security assurance, accreditation and risk management for a Federal Government environment in Canberra. Day-to-day is heavily technical-writing focused — producing SSPs, SRAs, POA&Ms and ATO documentation while working across Microsoft cloud services like Azure, M365, Entra ID, Defender, Fabric and Purview.
Salary: $120 - $130 per hour
Senior Cyber Security Analysts – Assurance & Accreditation- Location: Canberra, ACT.
- Duration: Initial 12 months, with two possible 12-month extensions.
- Anticipated start: December 2026
- Australian citizenship and current NV1 security clearance mandatory
Canberra Consulting is seeking three Senior Cyber Security Analysts to support cyber security assurance, accreditation, governance and risk management activities within a Federal Government environment.
These roles have a strong technical writing and security documentation focus. You will develop and maintain the security artefacts required to assess risks, demonstrate compliance and support the approval and ongoing operation of enterprise and project technology solutions.
Working across Microsoft cloud environments, you will support services including Azure, Microsoft 365, Entra ID, Defender, Microsoft Fabric and Microsoft Purview, translating technical information into clear, accurate and actionable security documentation.
What you will do
- Develop, review and maintain System Security Plans (SSPs), Security Risk Assessments (SRAs), and Plans of Action and Milestones (POA&Ms).
- Prepare documentation and coordinate activities supporting Authority to Operate (ATO) and Interim Authority to Operate (IATO) processes.
- Support cyber security risk assessments, assurance reviews and compliance activities.
- Develop security operating procedures, standards and supporting technical documentation.
- Coordinate vulnerability assessments, penetration testing and remediation tracking.
- Support the development and improvement of security monitoring and continuous monitoring capabilities.
- Contribute to incident response, business continuity and disaster recovery documentation.
- Prepare governance reports, audit evidence, briefing materials and security advice.
- Work with project teams, vendors, service providers and system integrators to address security requirements and improve assurance practices.
- Experience delivering cyber security assurance, accreditation, governance and risk management within Microsoft Azure environments.
- Strong technical writing skills, with experience producing security documentation and accreditation artefacts, including SSPs, risk assessments and ATO documentation.
- A sound understanding of Azure, Entra ID, Defender, Purview and Microsoft 365 security capabilities, including security considerations across data platforms such as Microsoft Fabric.
- Knowledge of the Australian Government Information Security Manual (ISM), Protective Security Policy Framework (PSPF) and security accreditation processes.
- The ability to interpret technical information, identify security risks and communicate practical advice to technical and non-technical stakeholders.
- Strong stakeholder engagement skills and the ability to coordinate assessments, documentation and remediation activities across multiple contributors.
Relevant tertiary qualifications or certifications such as CISSP, CISM, CCSP or Security+ are desirable.
Mandatory eligibility
Applicants must be Australian citizens and already hold a current NV1 security clearance or higher. Applicants who do not meet both requirements will not be progressed.
Successful candidates must also complete an organisational suitability assessment before commencement and meet applicable confidentiality and onboarding requirements.
Apply now
Submit your current CV, clearly identifying your citizenship, security clearance level and relevant experience in cyber security assurance, accreditation, technical documentation and Microsoft cloud environments.
Shortlisted candidates will be required to provide written responses addressing the selection criteria.
Early applications are encouraged, as only a limited number of candidates can be submitted.