Cyber Assurance Engineer — Defence & Industrial Security

Civmec Construction & Engineering Pty Ltd; Perth; Hybrid; AUD 90,000 - 130,000; Full time

Job summary

Civmec Construction & Engineering Pty Ltd in Henderson, WA is seeking a Cyber Security Assurance Engineer. The role focuses on translating security requirements into implementable controls, designing controls for protected environments, and maintaining governance artefacts to demonstrate effectiveness.

You will assess security across identity, networks, and third-party systems, producing documentation and risk reports while supporting vulnerability management and compliance with Defence/IRAP

Qualifications

• Qualifications in IT, cyber security or infrastructure.
• 3–5 years in cyber security or assurance.
• Defence/Government security experience.
• Ability to translate requirements into actions.
• Enterprise infrastructure and security controls.
• Strong written communication and documentation.
• CISSP, CISM or equivalent (desirable but not essential).
• CRISC or risk certification (desirable).
• ISM, Essential Eight, DISP, IRAP knowledge (highly regarded).

Responsibilities

• Interpret security frameworks into practical controls.
• Design and implement controls for sensitive environments.
• Maintain mappings between components, controls, owners and evidence.
• Conduct security risk assessments and remediation.
• Develop and govern system security documentation and standards.
• Track control deficiencies and report risk and progress.

Skills

Translate requirements into actions

Strong written communication

Enterprise infrastructure and security

Security controls design

Education

Bachelor's degree in IT/cyber security/infrastructure

Defence/Government security experience

Job description

Civmec Construction & Engineering Pty Ltd in Henderson, WA is seeking a Cyber Security Assurance Engineer. The role focuses on translating security requirements into implementable controls, designing controls for protected environments, and maintaining governance artefacts to demonstrate effectiveness.

You will assess security across identity, networks, and third-party systems, producing documentation and risk reports while supporting vulnerability management and compliance with Defence/IRAP