Consultant Security Assessor

EY; Canberra; Hybrid; AUD 80,000 - 110,000; Full time

Benefits offered by this job

Career development

Flexible work arrangements

Comprehensive benefits package

Job summary

EY is seeking a Consultant Cyber Security Assessor to support the delivery of Essential Eight maturity assessments across Federal Government and Defence sectors in Canberra. The role involves documentation reviews, evidence collection, and validation of security controls, focusing on developing a strong audit and technical capability.

Candidates should have 2-4 years of cyber security experience and relevant qualifications. This position offers flexible working arrangements and a competitive salary.

Qualifications

• Two to four years experience in cyber security, IT risk or technology environments.
• Exposure to security controls, infrastructure or system administration concepts.
• Experience in documentation review, analysis or audit activities desirable.

Responsibilities

• Support delivery of Essential Eight assessments through document reviews.
• Assist in evaluating control design and effectiveness.
• Contribute to development of assessment documentation.

Skills

Attention to detail

Effective communication

Willingness to learn

Education

Relevant tertiary qualification in information security, IT or related discipline

Tools

Security Plus

CISA

Job description

Consultant Cyber Security Assessor

The Consultant Cyber Security Assessor supports the delivery of Essential Eight maturity assessments across Federal Government, Defence and regulated industry clients. The role contributes to assurance activities including documentation reviews, evidence collection and validation of security controls under the guidance of senior team members. This position focuses on building foundational audit and technical capability while developing an understanding of government security frameworks and assurance methodologies. The Consultant contributes to high quality assessment outcomes by applying structured analysis and maintaining disciplined evidence practices. This is a hybrid position based in Canberra – Ngambri. Our roles can potentially be adjusted to work flexibly with reduced hours. Please speak with us about potential options.

Your Key Responsibilities

• Support delivery of Essential Eight assessments through document reviews, evidence gathering and control validation activities
• Assist in evaluating control design and effectiveness across core Essential Eight domains
• Contribute to development of assessment documentation including working papers and evidence records
• Document findings with clear linkage to evidence and defined maturity criteria
• Support development of remediation recommendations aligned to control gaps
• Participate in client interviews and workshops alongside senior team members
• Maintain alignment to assessment methodologies, quality standards and guidance
• Assist in preparing assessment reports and supporting artefacts

Experience and Qualifications

• Two to four years experience in cyber security, IT risk or technology environments
• Exposure to security controls, infrastructure or system administration concepts
• Experience in documentation review, analysis or audit activities desirable
• Relevant tertiary qualification in information security, IT or related discipline
• Working towards industry certifications such as Security Plus, CISA or equivalent desirable

Project and Program Management

• Support delivery activities in line with defined scope, schedule and milestones
• Maintain accurate tracking of assigned tasks and deliverables
• Contribute to identification of risks and issues impacting assessment progress
• Adhere to defined engagement governance, documentation standards and delivery processes

Essential Eight and Framework Experience

• Foundational understanding of the Essential Eight maturity model and supporting guidance
• Exposure to Australian Government security frameworks including ISM and PSPF
• Basic awareness of broader frameworks such as NIST and ISO 27001
• Ability to apply structured assessment approaches under supervision

Additional Skills and Attributes

• Strong attention to detail and structured approach to tasks
• Willingness to learn and develop technical and assurance capabilities
• Ability to follow defined methodologies and maintain evidence discipline
• Effective written and verbal communication skills
• Professional and accountable approach to client engagements

What we offer you

• Career development: At EY, your career is yours to shape! We’ll develop you with future-focused skills and equip you with world-class experiences ey.com/au/careerdevelopment
• Flexible work arrangements: Our flexible work policies empower you to balance your professional and personal life, fostering a culture of trust and autonomy.
• A comprehensive benefits package: From a yearly wellness incentive, to access to additional 8 weeks of flex leave per year, and family-friendly policies, including up to 26 weeks of gender-neutral paid parental leave, we cater to your diverse needs to help you thrive both personally and professionally www.ey.com/au/benefits
• Salary: We offer a competitive salary which is open to negotiation pending on skills and experience.

Acknowledgement of Country

EY acknowledges the Traditional Owners and Custodians of the lands on which EY offices are located around Australia. We pay our respects to their cultures, and to their Elders — past, present, and emerging. Find out more about our vision for reconciliation at ey.com/en_au/careers/indigenous

Inclusiveness is core to who we are and how we work together, driving value for our people and for our business. We encourage applications from people of all ages, nationalities, abilities, cultures, sexual orientations, and gender identities and are committed to providing an equitable and barrier free recruitment experience for all. We encourage you to share any support and adjustments you need to be your best and participate equitably in our recruitment process. We understand sharing your needs with us can be daunting, so if you have questions before or during your application, we welcome you to get in touch at [e-mail] or [phone] (option 2). Anything you tell us will be kept completely confidential.

Are you ready to shape your future with confidence? Apply today.

EY | Building a better working world

Our preferred applicant will be required to undertake employment screening by EY or our external third-party provider.

© 2026 Ernst & Young Australia. A member firm of Ernst & Young Global Limited. All Rights Reserved.