Cyber Analyst - Contract - NV1

Digital10; Canberra; On-site; AUD 120,000 - 160,000; Full time

Job summary

Digital10 in Canberra is seeking a security risk assessment specialist to conduct risk assessments for ICT systems and applications in line with PSPF and ISM. You will contribute to the full set of security documentation, including SSP-As and SSPs, and liaise with technical and non-technical stakeholders.

The role requires 3-5 years of government experience, strong communication skills, and a solid understanding of networking infrastructure. Operational Technologies exposure is a plus.

Qualifications

• 3-5 years’ experience in Government security risk assessments within a cyber team.
• Experience conducting security risk assessments with Azure Cloud, Legacy ICT systems, AI technology and complex systems.
• Knowledge and guidance on PSPF, ISM and Essential Eight.

Responsibilities

• Review and contribute to development of security documentation (SSP-As and SSPs).
• Provide guidance on system designs relating to PSPF and ISM.
• Identify opportunities to strengthen the department’s security posture.

Skills

Security risk assessments

Azure Cloud

Legacy ICT systems

AI technology

PSPF/ISM guidance

Executive briefings

Networking infrastructure

Stakeholder liaison

Written communication

Verbal communication

Operational Technologies awareness

Job description

Proficient in conducting security risk assessments of ICT systems and applications in accordance with the Protective Security Policy Framework (PSPF) and the Information Security Manual (ISM), with a strong focus on accuracy and attention to detail. The resource will review and contribute to the development of the full suite of security documentation, including System Security Plan Annexes (SSP-As) and System Security Plans (SSPs).

The applicant must have:

• 3-5 years’ experience working within Government conducting security risk assessments in a cyber team.
• Demonstrated experience in conducting security risk assessments with Azure Cloud, Legacy ICT systems, AI Technology and complex systems.
• Current knowledge and experience providing guidance on application and system designs relating to PSPF, ISM and Essential Eight.
• Experience in liaising with non-technical and technical stakeholders in relation to cyber security issues, system risks and recommendations.
• Demonstrated strong written and verbal communication skills, including experience preparing and delivering executive-level briefings. Assist in identifying opportunities to strengthen the security posture of the department’s environment.
• Strong understanding of networking infrastructure.
• Understanding of Operational Technologies will be an advantage.