Cyber Security Assessor

Talent Corp; Canberra; On-site; AUD 110,000 - 160,000; Full time

Job summary

Talent Corp is seeking an experienced Cyber Security Assessor to support independent assessment of cyber security risks across Defence ICT capabilities in Canberra (with Melbourne also considered). NV2 security clearance is required, and work will be conducted primarily at Defence sites.

You will conduct evidence-based assessments, report findings to senior stakeholders, and provide risk-based recommendations to strengthen security across complex ICT environments.

Qualifications

• Experience conducting ICT security assessments, audits or cyber risk engagements.
• Experience assessing complex ICT environments including networks, cloud services or enterprise systems.
• Strong knowledge of ISM, PSPF and DSPF frameworks.
• Ability to communicate complex risks through written reports for senior stakeholders.
• Excellent stakeholder engagement within Defence or Australian Government environments.
• Security certifications such as CISSP, CISM, CISA or equivalent practical experience valued.

Responsibilities

• Conduct independent cyber security assessments following Defence and Australian Government policies.
• Assess security controls, identify threats, vulnerabilities and risks.
• Prepare evidence-based assessment reports and risk briefs for technical teams and senior decision-makers.
• Engage with project teams, system owners and senior stakeholders during assessments.
• Provide practical cyber security advice and risk-based recommendations.
• Support prioritisation, assurance activities and security reporting.
• Maintain independence and declare potential conflicts of interest.

Skills

ICT security assessments

Risk analysis

Security control assessment

Stakeholder engagement

Executive-level reporting

Defence security frameworks

Job description

An opportunity is available for an experienced

Cyber Security Assessors to support the independent assessment of cyber security risks across complex Defence ICT capabilities. You will provide evidence-based assurance and risk advice that enables senior stakeholders to make informed decisions about the security and operation of critical technology environments.

• Start ASAP through to 30 June 2027
• Canberra strongly preferred, with Melbourne also considered. Work will primarily support Defence environments and will include attendance at Defence sites.
• Current NV2 security clearance required.
• Key experience: Cyber security assessments, ICT security assurance, risk analysis, security control assessment and strong knowledge of Australian Government and Defence security frameworks.

Your Duties Will Include

• Conduct independent cyber security assessments in accordance with Defence and Australian Government security policies, frameworks and assessment methodologies.
• Assess the effectiveness of security controls and identify security threats, vulnerabilities and associated risks.
• Prepare clear, evidence-based security assessment reports and risk briefs for technical teams and senior decision-makers.
• Engage with project teams, system owners, technical specialists and senior stakeholders throughout assessment activities.
• Provide practical cyber security advice, guidance and risk-based recommendations.
• Support assessment prioritisation, assurance activities and broader security reporting requirements.
• Maintain independence and objectivity throughout assessments, including identifying and declaring potential conflicts of interest.

Skills And Experience We Are Looking For

• Demonstrated experience conducting ICT security assessments, security audits, assurance reviews or cyber risk engagements.
• Experience assessing complex ICT environments including networks, cloud services, enterprise systems or emerging technologies.
• Strong understanding of the Australian Government Information Security Manual (ISM), Protective Security Policy Framework (PSPF) and Defence Security Principles Framework (DSPF).
• Ability to communicate complex security risks clearly through high-quality written assessments and executive-level reporting.
• Strong stakeholder engagement skills, ideally gained within Defence or Australian Government environments.
• Relevant security certifications such as CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor or IRAP Assessor are highly regarded; equivalent practical experience will also be considered.
• Strong professional judgement, attention to detail and the ability to provide independent, evidence-based security advice.