Cyber Security Assessor

Downer; Canberra; On-site; AUD 140,000 - 170,000; Full time

Job summary

Downer is seeking an SCTY Cyber Security Assessor in Canberra to prosecute NV1 clearance aligned security architecture within defence ecosystems. The role focuses on developing security architecture patterns and performing design reviews to uphold lifecycle security controls.

The successful candidate will define requirements and performance targets for cyber security test plans, support complex procurement efforts, and lead security review boards while communicating effectively with stakeholders

Qualifications

• CISSP or equivalent certification required.
• SABSA Foundation/Practitioner certification required.
• CISA or equivalent certification required.
• Minimum 5 years’ experience in cyber security, preferably with military context.
• Strong written, verbal and presentation skills.

Responsibilities

• Select, design, justify, implement and operate controls and management strategies to protect information systems.
• Conduct security risk, vulnerability assessments and business impact analyses for medium complexity systems.
• Investigate suspected attacks and manage security incidents; apply forensics where appropriate.
• Contribute to Secure Systems Development Lifecycle and architecture reviews.
• Support procurement activities, including development of SOWs and evaluation of responses.

Skills

Security architecture experience

Requirements & test plans

Procurement documentation

Security architecture reviews

Secure SDLC understanding

Military cyber security experience

Communication skills

Education

CISSP or equivalent A Security leadership

SABSA Foundation/Practitioner

CISA or equivalent

Job description

Job Title - SCTY Cyber Security Assessor

Job ID - 1126027

• Security Clearance: NV1 Clearance
• Length of Contract: 10 months
• The role closes on 15/09/2026
• Location: ACT

Skills and Experience:

• Developing security architecture patterns and integrating them with the broader Defence system architectures.
• Developing requirements and performance targets for the cyber security test and evaluation plans.
• Supporting complex procurement activities including development solicitation documentation (statements of work and statements of requirement) and the review and evaluation of responses to market approaches.
• Conducting security architecture and design review boards.
• Understanding and contributing to the Secure Systems Development Lifecycle.

Qualifications:

• ISC2 – Certified Information System Security Professional (CISSP) or equivalent category A Security leadership qualification.
• Sherwood Applied Business Security Architect (SABSA) Foundation Certificate or SABSA Practitioner certificate or equivalent Enterprise Security Architecture qualification.
• ISACA – Certified Information Systems Auditor (CISA) or equivalent Category B System Auditing Certification.
• At least 5 years’ experience working with military in Cyber Security.
• Requirement’s development and/or business analysis skills.
• Very strong written, presentation and oral communication skills.

SFIA Skills Sought:

The selection, design, justification, implementation and operation of controls and management strategies to maintain the security, confidentiality, integrity, availability, accountability and relevant compliance of information systems with legislation, regulation and relevant standards.

Explains the purpose of and provides advice and guidance on the application and operation of elementary physical, procedural and technical security controls. Performs security risk, vulnerability assessments, and business impact analysis for medium complexity information systems. Investigates suspected attacks and manages security incidents. Uses forensics where appropriate.

"We warmly welcome applications from individuals of all backgrounds, including First Nations Australians, Australian Defence Force and First Responder veterans, women in STEM, and people of all abilities, including those registered with the NDIS."