Cyber Security Architect

Paxus; City of Melbourne; On-site; AUD 150,000 - 210,000; Full time

Job summary

Paxus is seeking an experienced Cyber Security Architect based in Melbourne to lead enterprise-wide security architecture programs and advise executives on strategic risk decisions across IT/OT, data, and cloud environments.

The role requires deep knowledge of Australian critical infrastructure rules (SOCI Act) and industry frameworks (NIST, TOGAF, SABSA), plus proven leadership in complex, regulated settings.

Qualifications

• Extensive experience across technology and cyber security in large, regulated environments.
• Ability to shape a long-term security architecture vision aligned to enterprise strategy.
• Knowledge of Australian critical infrastructure legislation (SOCI Act) and security frameworks.

Responsibilities

• Lead enterprise-wide security architecture programs and advise executives.
• Translate regulatory requirements into pragmatic designs for IT/OT, data, cloud and networks.

Skills

Security leadership

Security architecture

Regulatory compliance

Identity & access management

Network security

Cloud security

Tools

NIST

AESCSF

TOGAF

SABSA

Job description

• Must be based in Melbourne - onsite requirement
• 12 month initial contract
• Must have valid Australian Work rights (no sponsorship)

Our client is seeking an experienced Cyber Security Architect who has experience across technology and cyber security, including senior security architecture leadership in large, complex, highly regulated environments. Our successful candidate will have the ability to lead enterprise-wide security architecture programs, advise executives, and influence cross-functional stakeholders to drive strategic outcomes.

Skills/experience needed:

• Extensive experience across technology and cyber security, including senior security architecture leadership in large, complex, highly regulated environments (energy sector experience preferred).
• Ability to shape and champion a long-term security architecture vision, aligning best practices with enterprise strategy, risk appetite, and regulatory obligations.
• Experience and knowledge of Australian critical infrastructure legislation (e.g., SOCI Act) and industry security frameworks including AESCSF, NIST, and SANS.
• Deep knowledge of security and enterprise architecture frameworks (e.g., TOGAF, SABSA) and the ability to align security architecture with enterprise reference models, capability maps, and governance structures.
• Security architecture expertise spanning identity & access management, data protection and privacy, application/API security, infrastructure and network security, and cloud/hybrid environments, with the ability to translate risk and regulatory requirements into pragmatic, implementable designs.
• Expertise in network security including IT/OT network segmentation and zoning, next-generation firewalls, micro segmentation, and secure network architectures.
• Energy sector experience will be highly regarded