Cyber Security Consultant

PRA; Brisbane; Hybrid; AUD 120,000 - 180,000; Full time

Job summary

PRA in Brisbane CBD is seeking a Cyber Security Consultant to design and own a security assurance process within a multi-year technology transformation. You will assess systems against ISM and NIST CSF 2.0, gather evidence, and guide stakeholders across GRC, architecture and approvals.

Working in a hybrid Brisbane environment, you will oversee analysts, provide security guidance, and ensure compliant delivery of secure systems throughout the project lifecycle, with emphasis on risk management

Qualifications

• Substantial experience in cyber security governance, risk and compliance.
• Experience embedding a security control or assurance framework.
• Experience in security assessment and authorisation using ISM RMF or equivalent.

Responsibilities

• Design and implement a security assurance system and own its ongoing operation.
• Assess systems against ISM and NIST CSF 2.0, collecting evidence of controls.
• Conduct security risk assessments and escalate where needed.
• Provide oversight of security analysts' assessment work and ensure quality.
• Offer security guidance to project and technology stakeholders.
• Engage with GRC and approvals to support informed decisions.

Skills

Cyber security governance

Security assurance framework

ISM RMF

NIST RMF

Stakeholder engagement

Job description

• Build and own the assurance process from the ground up

• Fixed term permanent role- 12 months
• Brisbane CBD, hybrid
• Build and own the assurance process from the ground up

About the opportunity

Our client is delivering a multi-year technology transformation program. As new systems are introduced, each must be assessed against the organisation's security control requirements before entering production. To meet this demand, the Cyber Security team is seeking a Cyber Security Consultant to support the ongoing security assurance process and to take ownership of that process once it's fully implemented. The role operates within a well-governed environment and works closely with Governance, Risk and Compliance (GRC), architecture and approvals functions.

The role

• Support the design and implementation of a security assurance system, and own its ongoing operation
• Assess systems against the Australian Government Information Security Manual (ISM) and NIST CSF 2.0, obtaining evidence that required controls have been implemented
• Conduct technical security risk assessments, or refer them to the GRC function as appropriate
• Provide oversight of the assessment work performed by security analysts, including prioritisation and quality review
• Provide security advice and guidance to project and technology stakeholders
• Engage with GRC and the approvals function to support informed decisions

Selection criteria

• Substantial experience in cyber security governance, risk and compliance
• Demonstrated experience implementing and embedding a security control or assurance framework within an organisation
• Experience in security assessment and authorisation using the ISM Risk Management Framework, NIST RMF or equivalent
• Sound judgement in interpreting control requirements within the context of the organisation
• Well-developed stakeholder engagement and written communication skills

Experience within financial services or government, and a relevant industry certification such as CISSP, CISM or CISA, will be highly regarded.