Cyber Security Assessor

Downer; Canberra; On-site; AUD 129,000 - 221,000; Full time

Job summary

Downer in Canberra is seeking a SCTY Cyber Security Assessor to support security architecture development within Defence system contexts. The role requires NV1 clearance and supports the Secure Systems Development lifecycle.

The contract lasts 10 months, located in ACT, with responsibilities spanning security architecture reviews, requirements development for cyber test plans, and procurement support across complex programs.

Qualifications

• Security architecture patterns development and integration with Defence system architectures.
• Developing requirements and performance targets for cyber security test and evaluation plans.
• Support complex procurement activities including development solicitation documents and evaluation of responses to market approaches.
• Conduct security architecture and design review boards.
• Understand and contribute to the Secure Systems Development Lifecycle.

Responsibilities

• The selection, design, justification, implementation and operation of controls and management strategies to maintain information system security, confidentiality, integrity, availability and compliance.
• Provide guidance on applying and operating security controls; perform risk, vulnerability assessments and business impact analyses for information systems.
• Investigate suspected attacks and manage security incidents; apply forensics as appropriate.

Job description

Job Title - SCTY Cyber Security Assessor

Job ID - 1126027

• Security Clearance: NV1 Clearance
• Length of Contract: 10 months
• The role closes on 19/08/2026
• Location: ACT

Skills and Experience:

• Developing security architecture patterns and integrating them with the broader Defence system architectures.
• Developing requirements and performance targets for the cyber security test and evaluation plans.
• Supporting complex procurement activities including development solicitation documentation (statements of work and statements of requirement) and the review and evaluation of responses to market approaches.
• Conducting security architecture and design review boards.
• Understanding and contributing to the Secure Systems Development Lifecycle.

Qualifications:

• ISC2 – Certified Information System Security Professional (CISSP) or equivalent category A Security leadership qualification.
• Sherwood Applied Business Security Architect (SABSA) Foundation Certificate or SABSA Practitioner certificate or equivalent Enterprise Security Architecture qualification.
• ISACA – Certified Information Systems Auditor (CISA) or equivalent Category B System Auditing Certification.
• At least 5 years’ experience working with military in Cyber Security.
• Requirement’s development and\or business analysis skills.
• Very strong written, presentation and oral communication skills.

SFIA Skills Sought:

The selection, design, justification, implementation and operation of controls and management strategies to maintain the security, confidentiality, integrity, availability, accountability and relevant compliance of information systems with legislation, regulation and relevant standards.

Explains the purpose of and provides advice and guidance on the application and operation of elementary physical, procedural and technical security controls. Performs security risk, vulnerability assessments, and business impact analysis for medium complexity information systems. Investigates suspected attacks and manages security incidents. Uses forensics where appropriate.

"We warmly welcome applications from individuals of all backgrounds, including First Nations Australians, Australian Defence Force and First Responder veterans, women in STEM, and people of all abilities, including those registered with the NDIS."