THE CLEARED MARKET DECLASSIFIED: SECURITY CLEARANCES AND CYBER CAREERS IN AUSTRALIA

Clearance Requirements Demystified.

If you work in or around Australian government and defence cyber security, you already know that a security clearance is not optional. It is the prerequisite that shapes which roles are available to you, how long your pathway to those roles will take, and in some cases, whether that pathway exists at all.

For those newer to this landscape, the clearance system can feel opaque. The terminology is detailed, the timelines can be longer than most people expect, and the misconceptions that circulate in the market can send candidates in the wrong direction entirely. Ben Rogalsky, Senior Consultant at e2 Cyber, spends a significant portion of his working week navigating this territory alongside candidates and clients. His perspective on how the system actually works - and where it tends to catch people out - is grounded by the reality of the current market.

e2 Cyber is here to help you make sense of the information at hand. For official guidance on your personal circumstances, AGSVA and the official bodies remain the authoritative source.

Baseline, NV1, NV2 and TSPV/TS-PA: The Clearance Levels Explained

A security clearance is a formal assessment of an individual's suitability to access classified government information, systems, locations, and programmes of work. It is conducted by AGSVA, the Australian Government Security Vetting Agency, which is the central vetting agency for the Australian Federal Government. AGSVA conducts clearance assessments for federal agencies, Defence Industry, and selected state and territory agencies.

The clearance process goes considerably beyond a standard police check. It examines financial history, foreign contacts and travel, address history, employment history, character references, and criminal history. The depth of that assessment, and the volume of information required, increases at each clearance level. The AGSVA Security Clearance Applicant Guide Book details what is required at each level.

AGSVA defines four security clearance levels, each aligned with the classification level of information an individual is authorised to access:

• Baseline - covers access to classified resources up to and including PROTECTED.
• Negative Vetting Level 1 (NV1) - covers access to classified resources up to and including SECRET.
• Negative Vetting Level 2 (NV2) - covers access to classified resources up to and including TOP SECRET.
• Positive Vetting (PV) - covers access to classified resources up to and including TOP SECRET, including caveated and code word information. This level includes a psychological assessment. Note: as of November 2025, Positive Vetting is being phased out and replaced by Top Secret-Privileged Access (TS-PA). See below for detail on this transition.

Top Secret-Privileged Access (TS-PA) is Australia's highest-level security clearance and is progressively replacing Positive Vetting. During the transition, *both are recognised as the Australian Government's highest level of security clearance. Unlike the clearance levels below it, TS-PA sits with ASIO's TS-PA Vetting Authority rather than AGSVA. The Department of Defence describes the change as bringing top secret clearances under a single vetting authority, with the intent of making movement between agencies simpler for those already cleared at this level. For existing Positive Vetting holders, the transition is happening in stages over several years, most likely at the point of revalidation or through other arrangements agreed with the TS-PA Vetting Authority, and AGSVA has indicated it will be in contact with individuals before any action is required. There is no change to NV1 and NV2 clearances, which remain with AGSVA.

TSPV - Top Secret Positive Vetting - is a term that has historically been used in the market to refer to PV level clearances and may still appear in role descriptions during the transition period.

Australian Citizenship, Sponsorship and Clearance Eligibility

AGSVA is clear on eligibility: an individual must be an Australian citizen and have a checkable background. All security clearances must also be sponsored by a government or business entity. Individuals cannot sponsor their own security clearance.

Australian citizenship is the baseline requirement. Ben encounters candidates who are affected by this regularly. "The vast majority of candidates are aware of the situation," he says. "They'll mention in the first phone call that they're not Australian citizens. They know they can't get a clearance. Most people are wearing it, but it's definitely a difficulty and makes it so much harder to find talent in this space."

That said, the citizenship requirement is not without exception. AGSVA states that a sponsoring entity can waive eligibility requirements if there is an exceptional business need and a risk assessment is conducted - however this is not a guarantee that a clearance will be granted, and in practice such waivers are rarely approved.

For foreign nationals specifically, AGSVA's guidance on sponsoring a new clearance outlines that a citizenship waiver may be considered in exceptional circumstances, including where the foreign national is necessary to meet a critical objective, the role cannot be performed by an Australian citizen, there is no conflict of interest in relation to the foreign national's country of allegiance, and the foreign national is a permanent resident who is actively seeking citizenship and the process will be concluded in a reasonable period. A waiver does not act as, or guarantee, that a security clearance will be granted.

For those who hold an existing clearance from another country, AGSVA notes that foreign nationals are required to hold a foreign security clearance recognised by the Australian Government under an international Security of Information Agreement or Arrangement in order to access Australian classified resources. Any recognition or transfer of a non-AGSVA clearance is subject to specific conditions and is not automatic.

The detail of the citizenship and waiver framework is complex. e2 Cyber does not act as an authority on individual eligibility circumstances. Candidates and organisations working through this should refer directly to AGSVA and, where Defence or Defence Industry sponsorship is involved, to AGSVA's guidance on sponsoring a new clearance.

How Long Does AGSVA Vetting Actually Take?

One of the most consistent sources of frustration in the cleared market is the gap between candidate expectation and clearance reality. AGSVA publishes target timeframes for completing a vetting assessment, though these are targets, not guarantees:

• Baseline - 20 business days
• NV1 - 70 business days
• NV2 - 100 business days
• Positive Vetting - 180 business days

AGSVA's Key Performance Indicators page, which is regularly updated, shows that as of 17 September 2026, most cases this financial year finishing outside those targets: Baseline at 23 business days, with 33.1% within KPI; NV1 at 78, with 38.7%; NV2 at 104, with 22.0%; and Positive Vetting at 206, with 34.4%. How long an individual case takes still depends on factors AGSVA lists itself, including how quickly the applicant supplies documents, how quickly referees respond, and availability for interviews.

“It's not like a police check timeframe,” Ben notes. “You're looking anywhere from a couple of months to sometimes twelve months for the higher levels. There is definitely a backlog with AGSVA for a lot of those requirements.”

Priority processing can be requested where there is an exceptional business need. For Positive Vetting, priority cases carry a 90 business day target, and AGSVA's KPI page currently shows them at 98 days, with 44.1% within KPI.

For candidates in process, Ben's consistent advice is transparency. “The biggest thing for recruiters in this space is being transparent with everyone about the process and what's happening.” If you are in process, communicate clearly with the people supporting your search. Uncertainty managed openly is considerably easier to navigate than uncertainty that becomes a surprise.

Revalidation Periods: How Long Your Clearance Stays Active

Clearances are not held indefinitely. AGSVA's revalidation page sets out the following intervals:

• Baseline - 15 years
• NV1 - 10 years
• NV2 - 5 to 7 years

For existing Positive Vetting holders, revalidation timelines continue to apply at 5 to 7 years pending transition to TS-PA, which AGSVA advises is likely to occur at the time of revalidation. It’s important to check in on requirements and be up to date on information pertaining to your status regularly.

Equally important is what happens when a clearance holder changes jobs. AGSVA's reporting changes page is clear that a clearance must be sponsored by the holder's current employer or contract manager, and that a sponsor must be an Australian Government entity or a DISP entity. A change of employer is itself a reportable change. When moving roles, the clearance holder must make sure the new employer registers sponsorship, because a clearance without a sponsor will be made inactive and may be cancelled. It is worth sorting out before the move, not after.

If concerns are raised about a clearance holder's suitability outside of routine revalidation, AGSVA will initiate a review for cause.

Changing Roles in the Cleared Market: What Happens to Your Clearance?

A question that arises regularly, particularly among candidates moving between government engagements, is how portable a clearance is when they change organisations. The answer depends on the clearance level and the agencies involved.

Clearance portability depends on who granted the clearance and where the holder is going. For an AGSVA clearance, moving employers is largely a matter of sponsorship, as set out above. Clearances granted by other authorised vetting agencies follow a separate path. AGSVA's guidance on sponsoring a new clearance sets out that these can transfer to AGSVA management where the individual holds a current clearance or one that can be reinstated, the granting agency no longer needs to maintain it, and the individual is moving to an Australian Government agency position that requires one. Some agencies also run their own processes. Ben points to the AFP, which in his experience puts people through its own clearance area. The AFP's eligibility page sets out its own selection process, including an Employment Suitability Questionnaire, drug testing and fingerprints, and notes that candidates who already hold an AGSVA clearance might get through the security check faster.

On the highest clearance level, Ben notes: “There's no private sector organisation that can hold it.” That remains true under TS-PA. DISP members at Levels 1 to 3 can sponsor clearances up to NV2, while the top secret level now sits with ASIO's TS-PA Vetting Authority. As AGSVA put it in Defence's announcement, every agency did Positive Vetting a little differently, which stopped people moving between agencies as quickly as Government wanted.

Having a Clearance and Landing a Cleared Cyber Job Are Not the Same Thing

Of all the misconceptions that circulate in the cleared market, this is the one Ben returns to most consistently. Candidates invest time, effort, and in some cases personal funds in obtaining a clearance and reasonably expect that the clearance will open doors proportionate to that investment. In practice, it is the starting point rather than the destination.

“People go out and get a clearance and think it guarantees them a job,” Ben says. “You've got to have the experience - across government and defence environments, understanding how different departments work. A clearance alone doesn't mean you'll instantly be hired for a high day rate in that space.”

Government and defence clients are not simply looking for cleared candidates. They are looking for cleared candidates with demonstrated experience operating in those environments - understanding the culture, the processes, and the way programmes of work are structured and delivered. Someone who holds an NV1 clearance but has spent their career in the private sector is a different proposition to someone who has worked inside government departments and understands how that world functions from the inside.

The path Ben recommends most consistently is to pursue clearance through a consulting organisation or through a permanent role that provides genuine exposure to government work, rather than obtaining a clearance independently and then expecting the market to respond. “Going through a consultancy and working there on a permanent basis to get that exposure and get that clearance - those are the opportunities,” he says. “A lot of people jump away from a permanent role a bit too early. Make sure you're confident in your abilities and working across that environment before you make that move.”

The e2 Cyber cyber entry guide is a useful reference for candidates thinking through how to structure the early part of that pathway.

Government Cyber Contracting in Australia: Where Demand Actually Sits

A majority of cleared work stems from Canberra, and Ben's read on the current market is that the contracting side has softened, while the professional services model - where government departments engage consulting organisations to deliver programmes of work - has remained more active.

“Canberra's been a little bit quiet on the contracting front but quite busy across professional services,” he says. “A lot of government departments are looking to utilise or outsource to organisations rather than hire labour hire.”

Defence is an exception to the broader softness Ben observes. Investment in defence programmes has remained substantial and demand for talent with appropriate clearances and defence experience in disciplines such as systems accreditation has stayed strong. The challenge is that the candidate pool meeting both criteria - clearance level and genuine defence environment experience - is not large.

NV1 represents the highest volume of demand. Organisations that technically require NV2 will often consider strong NV1 candidates and manage any upgrade through the clearance process once placed. At the top end, Ben describes TSPV as a unique space: there is always demand for talent, but candidates sacrifice some flexibility to work in it.

What Defence and Government Clients Look for Beyond the Paper

Beyond the clearance itself, what government and defence clients consistently evaluate is evidence of sustained contribution in relevant environments. Tenure matters. A candidate who has been extended multiple times within a programme of work, or brought back into different areas of the same organisation, signals the reliability and trust that a clearance alone cannot demonstrate.

“Have you been extended? Have you been brought back into different areas? Have you got that exposure?” Ben asks. “And then achievements - have you covered the key requirements, or have the skill sets to go out and learn what they're looking for? Having an actual impact or ownership of a project or a programme is key.”

The skills gap that the Australian market is experiencing more broadly is felt acutely in the cleared space, where the intersection of clearance level, government experience, and technical capability narrows the available field significantly. For clients, Ben's advice on navigating an urgent search at higher clearance levels is direct: “It's going to be a difficult search. It's going to take some time to find this talent. But if you're at that higher clearance level, it's about finding that clearance first and finding maybe one or two of the key skill sets rather than the unicorn - hiring in every skill set and training that person up.”

DISP, Defence Primes and Building a Cleared Workforce

Organisations that hold Defence Industry Security Program (DISP) membership have committed to a standard of personnel security management that, depending on their membership level, may authorise them to sponsor security clearances up to NV2 level.

WorkSec is an example of a DISP company operating in this space, providing security clearance sponsorship at Baseline, NV1, and NV2 levels alongside personnel security governance for organisations that need the capability without building it entirely in-house.

Ben's observation about attrition in the defence prime sector is pointed. “Sought after candidates are attracted to different roles depending on projects and requirements, but also the culture and potential to grow professionally. The hardest thing is uncovering the right talent, and keeping them. Valuing and developing your current team, investing in them is a critical step to in turn attract additional high level talent.” A cleared workforce is built through retention strategies, not just recruitment pipelines. For candidates, the same equation applies in reverse: a competitive rate will not hold a cleared professional who does not feel invested in.

Why Entry into Cleared Cyber Careers Remains Hard

Asked what he would change about the cleared market if he could, Ben does not reach for faster processing times or a larger citizenship pool, though both would help. What he identifies is more structural.

“More opportunity for entry,” he says. “A lot of the cleared space doesn't have a lot of entry level positions because of the lack of investment in that area. The people joining for work are usually at a mid-level, just taking a step back to get into the clearance space. If I could change one thing, it would be more pathways in.”

That observation connects to a broader pattern in Australian cyber security. The case for investing in entry-level pipelines rather than competing endlessly for the same experienced cohort has been made consistently, and heard inconsistently. In the cleared space, that constraint is compounded by citizenship requirements and clearance timelines that make an already narrow entry point narrower still.

The professionals who navigate the cleared market well are those who plan before they search - who build government exposure before chasing the clearance, and who understand that the return on that investment, while not immediate, is real. Knowing what the market pays at each level, and whether a contracting or consulting engagement is the right structure for the next move, are the two practical questions that follow most cleared career decisions. Both are worth working through before going to market rather than after.