Cyber Security Consultant

Cyber StrategiX; Brisbane; Hybrid; AUD 120,000 - 160,000; Full time

Benefits offered by this job

Health insurance

Job summary

Cyber StrategiX is seeking a Cyber Security Consultant to build and own the security assurance process within a Brisbane-based, hybrid role. The candidate will align systems with the Australian Government ISM and NIST CSF 2.0, ensuring evidence-based control implementation and risk assessments.

The role collaborates with GRC, architecture and approvals teams in a well-governed environment, focusing on governance, risk management and stakeholder communication.

Qualifications

• Substantial experience in cyber security governance, risk and compliance.
• Experience implementing and embedding a security control or assurance framework.
• Experience in security assessment and authorisation using ISM RMF or NIST RMF or equivalent.
• Sound judgement interpreting control requirements in organisational context.
• Strong stakeholder engagement and written communication skills.

Responsibilities

• Design and implement a security assurance system and own its operation.
• Assess systems against ISM and NIST CSF 2.0, collecting evidence of controls.
• Conduct technical security risk assessments or refer to GRC.
• Provide oversight of assessment work by security analysts and ensure quality.
• Offer security guidance to project and technology stakeholders.
• Engage with GRC and approvals to support informed decisions.

Skills

Governance & compliance

Security controls & assurance

Security assessment & RMF/ISM

Stakeholder engagement

Written communication

Job description

• Fixed term permanent role- 12 months
• Brisbane CBD, hybrid
• Build and own the assurance process from the ground up

About the opportunity

Our client is delivering a multi-year technology transformation program. As new systems are introduced, each must be assessed against the organisation's security control requirements before entering production. To meet this demand, the Cyber Security team is seeking a Cyber Security Consultant to support the ongoing security assurance process and to take ownership of that process once it's fully implemented. The role operates within a well-governed environment and works closely with Governance, Risk and Compliance (GRC), architecture and approvals functions.

The role

• Support the design and implementation of a security assurance system, and own its ongoing operation
• Assess systems against the Australian Government Information Security Manual (ISM) and NIST CSF 2.0, obtaining evidence that required controls have been implemented
• Conduct technical security risk assessments, or refer them to the GRC function as appropriate
• Provide oversight of the assessment work performed by security analysts, including prioritisation and quality review
• Provide security advice and guidance to project and technology stakeholders
• Engage with GRC and the approvals function to support informed decisions

Selection criteria

• Substantial experience in cyber security governance, risk and compliance
• Demonstrated experience implementing and embedding a security control or assurance framework within an organisation
• Experience in security assessment and authorisation using the ISM Risk Management Framework, NIST RMF or equivalent
• Sound judgement in interpreting control requirements within the context of the organisation
• Well-developed stakeholder engagement and written communication skills

Experience within financial services or government, and a relevant industry certification such as CISSP, CISM or CISA, will be highly regarded.