Cyber Security Consultant | NV2

Rubix Solutions; Canberra; On-site; AUD 150,000 - 190,000; Full time

Job summary

Rubix Solutions, partnering with a leading defence prime, is seeking an NV2 cleared Cyber Security Consultant to support customers across Defence, government and secure environments. You will assess cyber exposure, evaluate control effectiveness and advise on risk management across ICT and OT systems.

You will translate technical findings into practical recommendations and work with stakeholders to improve security outcomes.

Qualifications

• Experience in cyber security consulting, security assurance, governance or risk assessment.
• Ability to assess security controls and translate findings into actions.
• Familiarity with ISM, ISO 27001 and the NIST Cybersecurity Framework.
• Strong report writing skills and the ability to explain issues, impacts and treatments.

Responsibilities

• Conduct security threat and risk assessments across ICT and OT systems.
• Assess systems against security frameworks and identify gaps.
• Analyse threats, threat actors and vulnerabilities in client operations.
• Produce risk assessments and reports with findings and recommended improvements.
• Review the effectiveness of existing controls and propose treatments.
• Develop security policies, procedures and governance plans.
• Gather evidence through documents, questionnaires, stakeholder interviews and workshops.
• Explain technical and business risks to stakeholders with varying security knowledge.
• Research security technologies and contribute to customer solutions.
• Collaborate with colleagues across Australia and overseas to share expertise.

Job description

Rubix Solutions is partnering with a leading defence prime to recruit an NV2 cleared Cyber Security Consultant supporting customers across Defence, government and secure environments.

You’ll help customers understand their cyber exposure, assess the effectiveness of their security controls and make informed decisions about managing risk. Your work will span ICT and operational technology systems, combining technical assessment with governance and clear, practical advice.

This role suits someone who enjoys investigating security challenges, producing well-reasoned recommendations and working directly with stakeholders to improve security outcomes.

What you’ll do:

• Conduct security threat and risk assessments across ICT and OT systems.
• Assess systems against relevant security frameworks and identify control gaps.
• Analyse threats, threat actors and vulnerabilities in the context of customer operations.
• Produce clear risk assessments and reports outlining findings, business impacts and recommended improvements.
• Review the effectiveness of existing controls and propose proportionate treatments.
• Develop security policies, procedures and plans to strengthen governance.
• Gather evidence through document reviews, structured questionnaires, stakeholder interviews and workshops.
• Explain technical and business risks to stakeholders with different levels of security knowledge.
• Research security technologies and contribute to the development of customer solutions.
• Collaborate with colleagues across Australia and overseas to share expertise and improve delivery.

What you’ll bring:

• Experience in cyber security consulting, security assurance, governance or risk assessment.
• An understanding of how to assess security controls and translate findings into actionable recommendations.
• Familiarity with the Australian Government Information Security Manual (ISM), ISO 27001 and the NIST Cybersecurity Framework.
• Strong report‑writing skills, with the ability to clearly explain security issues, impacts and treatments.
• Demonstrated stakeholder engagement skills and confidence working directly with customers.
• A proactive, organised approach and close attention to detail.
• The ability to adapt to changing priorities and work collaboratively through complex problems.

Relevant certifications such as CRISC, CISM or ISO 27001 Lead Auditor, or progress towards achieving one, would be highly regarded.

Security clearance:

A current Australian Government NV2 security clearance is required for this opportunity.