Cyber Security Consultant

KBR; Canberra; On-site; AUD 140,000 - 190,000; Full time

Benefits offered by this job

Flexible working

Competitive salary

Paid parental leave

Income protection

Career development

Job summary

KBR in Australia is seeking a Cyber Security Consultant to support delivery of secure, resilient and compliant capability in Defence contexts. You will operate in the Land C4 Systems Branch, applying critical thinking to manage cyber risk and enable capability outcomes.

Ideal candidates bring certifications such as CISSP/CISM/IRAP, with strong experience in security assessments, risk management and reporting in complex ICT environments. Security-clearance eligibility and citizenship are required.

Qualifications

• Relevant certifications or experience aligned to cyber security assessment (e.g. CISSP, CISM, IRAP, ISO 27001)
• Strong experience in cyber security assessment, risk management and compliance
• Knowledge of Defence security frameworks, including ISM and PSPF

Responsibilities

• Deliver cyber security assessment and authorisation activities aligned to ISM, PSPF and Defence frameworks
• Conduct Operational and Design Effectiveness Reviews to evaluate system security
• Assess and audit the effectiveness of implemented security controls
• Produce key artefacts, including Security Assessment Reports (SARs), ATO briefs and risk assessments
• Identify, assess and manage cyber security risks and vulnerabilities across complex systems
• Analyse security exceptions, defects and architectural weaknesses
• Conduct threat modelling and evaluate system security architecture
• Support the protection of system confidentiality, integrity and availability
• Contribute to governance activities, including Change Control Boards
• Review documentation, policies and procedures to ensure alignment with Defence and Government requirements
• Ensure ongoing compliance with mandated cyber security standards and controls
• Support stakeholders to understand and mitigate cyber risks

Skills

CISSP

CISM

IRAP

Job description

Cyber Security Consultant

At KBR – We do things that matter. We deliver science, technology and engineering solutions to governments and companies around the world. KBR employs approximately 38,000 people worldwide with customers in more than 80 countries and operations in over 29 countries. KBR is proud to work with its customers across the globe to provide technology, value-added services, and long-term operations and maintenance services to ensure consistent delivery with predictable results. At KBR, We Deliver. Think.KBR.com

KBR in Australia has over 65 years working on some of Australia’s largest and most complex projects, KBR has unmatched experience supporting the nation’s critical infrastructure, energy transition and national security priorities. KBR has around 2,000 employees throughout Australia, who are focused on delivering innovative technology and engineering solutions for a safer, more secure and sustainable future. Learn more about KBR in Australia. Belong, Connect and Grow at KBR. At KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team’s philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver – Together.

The Opportunity

This is a unique opportunity to contribute to delivering next-generation Command, Control, Communications and Computing (C4) capability within the Joint MSP domain to the Australian Defence Force. As a Cyber Security Consultant, you will operate within the Land C4 Systems Branch, embedded in the Communications Delivery Team, supporting the delivery of secure, resilient and compliant capability into the Joint Land Force. You will work in a complex, fast-paced Defence environment, applying critical thinking and expert judgement to manage cyber risk and support capability outcomes.

Responsibilities

• Deliver cyber security assessment and authorisation activities aligned to ISM, PSPF and Defence frameworks
• Conduct Operational and Design Effectiveness Reviews to evaluate system security
• Assess and audit the effectiveness of implemented security controls
• Produce key artefacts, including Security Assessment Reports (SARs), ATO briefs and risk assessments
• Identify, assess and manage cyber security risks and vulnerabilities across complex systems
• Analyse security exceptions, defects and architectural weaknesses
• Conduct threat modelling and evaluate system security architecture
• Support the protection of system confidentiality, integrity and availability
• Contribute to governance activities, including Change Control Boards
• Review documentation, policies and procedures to ensure alignment with Defence and Government requirements
• Ensure ongoing compliance with mandated cyber security standards and controls
• Support stakeholders to understand and mitigate cyber risks
• Minimum AGSVA NV1 Security Clearance and Australian citizenship required to be eligible.

As the ideal candidate you will bring

• Relevant certifications or experience aligned to cyber security assessment (e.g. CISSP, CISM, IRAP, ISO 27001)
• Strong experience in cyber security assessment, risk management and compliance
• Knowledge of Defence security frameworks, including ISM and PSPF
• Experience working with complex ICT environments or communications systems (radio/satellite highly regarded)
• Solid understanding of networks, systems, architectures and security controls
• Proven ability to deliver clear, high-quality technical reports and documentation
• Defence, CASG or Army background
• Exposure to Land C4 or similar integrated capabilities
• Experience assessing cyber risk in large-scale or mission-critical environments

What we will offer you

• A workplace culture certified as a Great Place To Work
• Flexible working
• Competitive salary (including annual reviews)
• Paid parental leave
• Income protection
• Corporate rewards
• Salary packaging/Novated leasing
• Employee stock purchase plans
• Flu shots, skin checks and discounted private health insurance
• Career development: Online learning, mentorship and career pathways

We Value Our People – We create diverse, inclusive environments in which each person can feel safe, respected and valued, and where everyone has opportunities to grow and reach their full potential.

We Deliver – We are uncompromising in our commitment to deliver innovative, high-quality, technology-led solutions for our customers and exceptional, sustainable value for all our stakeholders.

We Are People of Integrity – We value honesty, trust, courage, fairness, prudence and tenacity. We believe doing what’s right for the planet, the communities where we work, and our people is good for business.

We Empower – We empower our people with a shared purpose, the right tools and the supportive culture they need to be proactive decision-makers, to be adaptive to change, and to succeed.

We Are a Team of Teams – We have a will to succeed, but we value the achievements of our team of teams over individual accomplishments. Our collective focus makes us a better, stronger, more effective company. We have also embedded environmental, social and governance (ESG) principles in every business operation and corporate function. Not only are we committed to operating safely, sustainably and equitably, but we are also committed to using our capabilities and expertise to help our customers accomplish their sustainability goals.