Cyber Security Assessor

Talent; Canberra; On-site; AUD 120,000 - 180,000; Full time

Job summary

Talent is seeking an experienced Cyber Security Assessor to support independent assessment of cyber risks across Defence ICT capabilities. You will provide evidence-based assurance and risk advice to enable senior stakeholders to make informed decisions about security and operation of critical technology environments.

Canberra strongly preferred, with Melbourne also considered. The role requires NV2-level security awareness, engagement with project teams and system owners, and delivery of clear,

Qualifications

• Experience conducting ICT security assessments, security audits, assurance reviews or cyber risk engagements.
• Experience assessing complex ICT environments including networks, cloud services, enterprise systems or emerging technologies.
• Strong understanding of the Australian Government ISM, PSPF and DSPF frameworks.
• Ability to communicate complex security risks clearly through written assessments and executive reporting.
• Strong stakeholder engagement skills in Defence or Australian Government environments.
• Security certifications such as CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor or IRAP Assessor or equivalent experience.

Responsibilities

• Conduct independent cyber security assessments per Defence and Government policies.
• Assess security controls and identify threats, vulnerabilities and risks.
• Prepare evidence-based security assessment reports and risk briefs for technical teams and senior decision-makers.
• Engage with project teams, system owners, technical specialists and senior stakeholders.
• Provide practical cyber security advice, guidance and risk-based recommendations.
• Support assessment prioritisation, assurance activities and security reporting.
• Maintain independence and declare potential conflicts of interest.

Skills

ICT security assessments

Security audits

Executive reporting

Stakeholder engagement

Defence/government frameworks

Security certifications

Job description

General Information

• Canberra strongly preferred, with Melbourne also considered. Work will primarily support Defence environments and will include attendance at Defence sites.
• Current NV2 security clearance required.
• Key experience: Cyber security assessments, ICT security assurance, risk analysis, security control assessment and strong knowledge of Australian Government and Defence security frameworks.

An opportunity is available for an experienced Cyber Security Assessors to support the independent assessment of cyber security risks across complex Defence ICT capabilities. You will provide evidence-based assurance and risk advice that enables senior stakeholders to make informed decisions about the security and operation of critical technology environments.

Your Duties Will Include

• Conduct independent cyber security assessments in accordance with Defence and Australian Government security policies, frameworks and assessment methodologies.
• Assess the effectiveness of security controls and identify security threats, vulnerabilities and associated risks.
• Prepare clear, evidence-based security assessment reports and risk briefs for technical teams and senior decision-makers.
• Engage with project teams, system owners, technical specialists and senior stakeholders throughout assessment activities.
• Provide practical cyber security advice, guidance and risk-based recommendations.
• Support assessment prioritisation, assurance activities and broader security reporting requirements.
• Maintain independence and objectivity throughout assessments, including identifying and declaring potential conflicts of interest.

Skills And Experience We Are Looking For

• Demonstrated experience conducting ICT security assessments, security audits, assurance reviews or cyber risk engagements.
• Experience assessing complex ICT environments including networks, cloud services, enterprise systems or emerging technologies.
• Strong understanding of the Australian Government Information Security Manual (ISM), Protective Security Policy Framework (PSPF) and Defence Security Principles Framework (DSPF).
• Ability to communicate complex security risks clearly through high-quality written assessments and executive-level reporting.
• Strong stakeholder engagement skills, ideally gained within Defence or Australian Government environments.
• Relevant security certifications such as CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor or IRAP Assessor are highly regarded; equivalent practical experience will also be considered.
• Strong professional judgement, attention to detail and the ability to provide independent, evidence-based security advice.