Cyber Security Risk Assessor – Government (Azure/AI)

Peoplebank; Canberra; Hybrid; AUD 110,000 - 150,000; Full time

Job summary

Peoplebank is seeking Cyber Security Risk Assessors to support a Federal Government department across Azure cloud, legacy ICT, and AI environments. You will conduct security risk assessments, develop SSPs, and advise on secure system design to ensure accreditation readiness.

The role requires 3–5 years of government experience, strong knowledge of PSPF, ISM and Essential Eight, and the ability to communicate risks to both technical and non-technical stakeholders.

Qualifications

• 3–5 years' experience conducting cyber security risk assessments in government.
• Experience with Azure Cloud, legacy ICT, AI technologies and complex enterprise environments.
• Strong knowledge of PSPF, ISM, and Essential Eight.
• Experience communicating risks to technical and non-technical stakeholders.

Responsibilities

• Conduct security risk assessments for ICT systems and applications in line with PSPF, ISM, and Essential Eight requirements.
• Review, develop, and maintain security documentation, including System Security Plans (SSPs) and SSP Annexes (SSP-As).
• Assess security risks across Azure cloud environments, legacy systems, AI technologies, and other complex ICT platforms.
• Provide cyber security advice relating to system and application design.
• Present security risks, recommendations, and security artefacts to technical teams and senior executives.
• Collaborate with cross-functional teams to implement security controls and ensure compliance with Australian Government standards.
• Identify opportunities to strengthen the department's overall cyber security posture.
• Support issue resolution and provide guidance on security-related matters.

Skills

Risk assessments

Azure Cloud

Governance

Stakeholder comms

Security documentation

Job description

Peoplebank is seeking Cyber Security Risk Assessors to support a Federal Government department across Azure cloud, legacy ICT, and AI environments. You will conduct security risk assessments, develop SSPs, and advise on secure system design to ensure accreditation readiness.

The role requires 3–5 years of government experience, strong knowledge of PSPF, ISM and Essential Eight, and the ability to communicate risks to both technical and non-technical stakeholders.