Cyber Security Architect: Secure-by-Design Transformation

CSIRO; Canberra; On-site; AUD 136,000 - 159,000; Full time

Job summary

CSIRO is recruiting a Cyber Security Architect to secure two major technology transformation programs. You will provide expert security architecture advice and hands-on guidance to ensure solutions are secure by design.

Join CSIRO to translate complex cyber security requirements into practical controls, risk treatments and assurance activities, strengthening cyber resilience across the organisation.

Qualifications

• Tertiary qualifications in cyber security, information technology, computer science, engineering or related discipline.
• Extensive experience as a cyber security architect delivering hands-on security architecture outcomes.
• Current Australian Government NV1 security clearance.
• Experience providing secure-by-design advice across major transformation programmes.

Responsibilities

• Provide hands-on cyber security architecture and secure-by-design delivery support for CSIRO transformation programmes.
• Act as primary cyber security architecture advisor for the programmes, delivering timely and risk-based advice.
• Review designs and artefacts to identify security risks, control gaps and improvement opportunities.
• Develop security architecture guidance, threat models, risk assessments and assurance activities.
• Translate security requirements into practical delivery actions across design, procurement, build and operations.
• Embed security controls across design, procurement, build, implementation and handover.

Skills

Cyber security

Security architecture

Stakeholder engagement

Secure-by-design

Threat modelling

Education

Tertiary qualifications in cyber security/IT/CS/engineering

Job description

CSIRO is recruiting a Cyber Security Architect to secure two major technology transformation programs. You will provide expert security architecture advice and hands-on guidance to ensure solutions are secure by design.

Join CSIRO to translate complex cyber security requirements into practical controls, risk treatments and assurance activities, strengthening cyber resilience across the organisation.