Cyber Assurance Engineer

Civmec Construction & Engineering Pty Ltd; Cockburn; On-site; AUD 110,000 - 160,000; Full time

Benefits offered by this job

Staff benefits

Insurance coverage

Travel discounts

Job summary

Civmec Construction & Engineering Pty Ltd is seeking a Cyber Security Assurance Engineer based in Henderson, WA. The role focuses on translating security requirements into implementable controls and maintaining governance artefacts to demonstrate effectiveness.

You will work within a multidisciplinary engineering and construction environment, contributing to secure infrastructure and critical systems while coordinating with Defence/Government security standards.

Qualifications

• 3–5 years in cyber security or assurance.
• Defence/Government security experience.
• Knowledge of ISM, Essential Eight, DISP and IRAP highly regarded.

Responsibilities

• Interpret ISM, Essential Eight, PSPF and DSPF into practical controls.
• Design and implement controls for PROTECTED and sensitive environments.
• Maintain mappings between components, controls, owners and evidence.
• Assess control design and effectiveness across identity and networks.
• Review architectures and system changes to identify security gaps.
• Develop and govern system security documentation and standards.
• Own and maintain SRMPs, security plans and risk registers.
• Collect and validate technical evidence for DISP and IRAP.
• Conduct technical security risk assessments and remediation processes.
• Track control deficiencies and report on risk and progress.
• Support vulnerability, patching, hardening and control monitoring.
• Assess third-party and supply chain systems within security boundaries.

Skills

Cyber security

Security assurance

Written communication

Risk assessment

Translate requirements into actions

Education

Degree in IT / cyber security / infrastructure

Job description

Civmec is an Australian-owned, integrated, multidisciplinary heavy engineering and construction services provider to the energy, resources, infrastructure, marine and defence sectors. With a pipeline of more than $1 billion in current and future projects, our diversification enables us to operate extensively across the nation, supporting a wide range of landmark projects and providing variety and career development opportunities for our workforce.

Join the Civmec Team

At Civmec, we believe that building the right solutions in-house is key to meeting our evolving business needs and supporting sustainable growth. Joining our team means working directly on systems that have a real and immediate impact across the business.

This is a full-time position based in Henderson, WA, offering the opportunity to work within a collaborative and forward-thinking team supporting critical business operations.

As Cyber Security Assurance Engineer, you will provide technical assurance of systems and security controls, translating security requirements into implementable controls and maintaining governance and assurance artefacts to demonstrate their effectiveness.

The Role

• Interpret ISM, Essential Eight, PSPF and DSPF into practical controls
• Design and implement controls for PROTECTED and sensitive environments
• Maintain mappings between components, controls, owners and evidence
• Assess control design and effectiveness across identity and networks
• Review architectures and system changes to identify security gaps
• Develop and govern system security documentation and standards
• Own and maintain SRMPs, security plans and risk registers
• Collect and validate technical evidence for DISP and IRAP
• Conduct technical security risk assessments and remediation processes
• Track control deficiencies and report on risk and progress
• Support vulnerability, patching, hardening and control monitoring
• Assess third-party and supply chain systems within security boundaries

About You

To be successful in the role, you will possess the following:

• Qualifications in IT, cyber security or infrastructure
• 3-5 years in cyber security or assurance
• Defence/Government security experience
• Ability to translate requirements into actionsEnterprise infrastructure and security controls
• Strong written communication and documentation
• CISSP, CISM or equivalent (desirable but not essential)
• CRISC or risk certification (desirable)
• ISM, Essential Eight, DISP, IRAP knowledge (highly regarded)

Due to the Security Clearance required for this position, applicants must be an Australian Citizen and eligible to obtain and uphold a Baseline Security Clearance through the Australian Department of Defence.

At Civmec, we offer an inclusive workplace built on family values, with a ‘Never Assume’ culture, sustained by our experienced and supportive management team. We believe our workforce is our greatest asset, and that’s why we provide an environment rich in career development opportunities to upskill and develop professionally. Our generous Reward and Recognition scheme recognises employees that go the extra mile. Our staff benefits scheme gives you access to accident and sickness insurance, and a range of travel, entertainment, vehicle and lifestyle discounts.

Civmec is an equal opportunity employer and encourages applications from Aboriginal and Torres Strait Islanders. Defence force experience is desirable, and veterans are encouraged to apply. We respectfully request no agency submissions.