Cyber Security Engineer

Isaac Regional Council; Moranbah; On-site; AUD 110,000 - 160,000; Full time

Job summary

Isaac Regional Council is seeking a Cyber Security Engineer to join our ICT security team in Queensland. You will lead cybersecurity governance engagements, modernise artefacts and perform Essential Eight assessments, with a focus on assurance and executive reporting.

Your role includes coordinating business continuity exercises, investigating security incidents and providing guidance on security controls to maintain confidentiality, integrity and availability of information systems in line with

Qualifications

• Experience in cybersecurity and ICT governance engagements.
• Modernisation of key cybersecurity and governance artefacts.
• Essential Eight maturity assessments, implementation, or assurance activities.
• Executive-level cybersecurity reporting and advice.
• Coordination and execution of Business Continuity exercises.
• Cybersecurity incident investigation and treatment.

Skills

Cybersecurity governance

ICT governance

Essential Eight (E8)

Executive reporting

Business continuity

Security incident investigation

Job description

Job Title - Task Title: Cyber Security Engineer

Job Id 1244982

• Security Clearance: No Clearance required
• Length of Contract: 12 with 2 x 12 months extension possibility
• The role closes on 07/09/2026
• Location: Isaac Regional Council, QLD

Skills and experience sought:

• Cybersecurity and ICT governance engagements
• Modernisation of key cybersecurity and governance artefacts
• Essential Eight (E8) maturity assessments, implementation, or assurance activities
• Executive-level cybersecurity reporting and advice
• Coordination and execution of Business Continuity exercises
• Cybersecurity incident investigation and treatment

SFIA Skills Sought:

The selection, design, justification, implementation and operation of controls and management strategies to maintain the security, confidentiality, integrity, availability, accountability and relevant compliance of information systems with legislation, regulation and relevant standards.

SCTY Level 4: Explains the purpose of and provides advice and guidance on the application and operation of elementary physical, procedural and technical security controls. Performs security risk, vulnerability assessments, and business impact analysis for medium complexity information systems. Investigates suspected attacks and manages security incidents. Uses forensics where appropriate.