Cybersecurity Certification Consultant | NV1 | Canberra, Melbourne, Remote

pinaka; Canberra; Hybrid; AUD 120,000 - 160,000; Full time

Job summary

pinaka is seeking a Cybersecurity Certification Consultant to join the Land C4 Systems Branch within the CASG framework. The role requires NV1 clearance and work across Australia with hybrid arrangements and onsite presence three days per week, including Canberra or Melbourne expectations.

The successful candidate will assess and authorise security measures, conduct risk-based evaluations, and produce security reports to support Defence technology capabilities.

Qualifications

• Qualifications / experience to obtain DCIAB-CSAA endorsement as Cyber Security Assessor.
• Strong understanding of ICT architectures, networks, platforms, cyber/security governance within Defence.
• Experience leading security cyber audits, documenting outcomes and delivering reports.

Responsibilities

• Provide System Assessment and Authorisation activities as directed by the CA31 Engineering Manager.
• Conduct security assessments per ASD Information Security Manual, PSPF, Defence Security Policy Framework and related guidance.
• Perform security assessments using Operational Effectiveness Reviews and Design Effectiveness Reviews where justified.
• Audit effectiveness of security controls across CA31 capability systems.
• Develop Security Assessment Reports, ATO briefs, risk statements and remediation actions.
• Identify, analyse, evaluate and mitigate cyber security and business risks.
• Identify and assess vulnerabilities from security exceptions, defects and design weaknesses.
• Assess security architecture and services using threat-modelling methodologies.
• Protect confidentiality, integrity and availability of Defence information and systems.
• Review security documentation for Defence and Australian Government alignment.
• Ensure system compliance with mandatory cyber security requirements.
• Support configuration governance and risk options for Executive Authority.
• Provide cyber security advice within CA31 assessor scope.
• Help CA31 understand cyber risks affecting capability delivery and operations.
• Build relationships with sustainment products, OEM, operations and security stakeholders.

Skills

Cybersecurity auditing

Threat modelling

Governance & compliance

ICT architectures

Education

CISSP

CISM

ISO 27001 Lead Auditor

IRAP accreditation

Job description

Cybersecurity Certification Consultant

Australian citizenship required. Must have an active Negative Vetting Level 1 (or higher) security clearance.

Location: Australia-wide (Hybrid).

What to Submit

1. A tailored resume in docx format (maximum four pages).

RFQ Details

• RFQ ID: 2026-175-Joint-LC4S-RFQ
• Agency: Department of Defence
• Closing Date: 18th Sep 2026
• Estimated Start Date: ASAP
• Initial Contract Duration: Until 31 March 2027
• Extension Term: Opportunity for extension
• Number of Extensions: Not specified
• Experience Level: L3
• Security Clearance: NV1
• Location of Work: No location restrictions within Australia; occasional travel may be required
• Working Arrangements: Minimum three days per week onsite; if Melbourne or Canberra based, part-time office attendance is expected
• Maximum Hours: Not specified

Job Details

Land Communications & Specialist Systems SPO is seeking a suitably qualified and experienced Cybersecurity Certification Consultant to work as an embedded member of the Land C4 Systems Branch. The role sits within CASG and supports the CA31 fleets, which sustain and enhance Land C4 systems at the operational and tactical level, including the Tactical Communications Network, Battlefield Telecommunications Network, Battlefield Management System and Deployable Information Environment Protected and Secret.

The successful candidate will work effectively in a complex environment, think critically, apply excellent problem-solving skills and manage competing priorities with a focus on mitigating risk. Services are to be delivered in accordance with relevant Australian and international standards, regulations, Defence requirements and industry best practice.

Key Duties and Responsibilities

• Provide System Assessment and Authorisation activities as directed by the CA31 Engineering Manager.
• Conduct system Assessment and Authorisation activities in accordance with the ASD Information Security Manual, Protective Security Policy Framework, Defence Security Policy Framework, and Cyber Security Assessment and Authorisation Charter, methodology, templates and guidance.
• Perform security assessments using Operational Effectiveness Reviews as the default approach, with Design Effectiveness Reviews where justified.
• Audit the effectiveness of system security controls implemented across CA31 capability systems.
• Develop Security Assessment Reports, ATO briefs, risk statements and recommended remediation actions.
• Identify, analyse, evaluate and elevate cyber security and business risks.
• Identify and assess vulnerabilities arising from security exceptions, software defects, and architecture or design weaknesses.
• Assess system security architecture and services using structured threat-modelling methodologies.
• Protect the confidentiality, integrity and availability of Defence information and systems.
• Review security documentation, policies and procedures for alignment with Defence and Australian Government requirements.
• Ensure system compliance with mandatory cyber security requirements.
• Support configuration governance, including Change Control Boards, and provide risks, mitigations and options for Executive Authority acceptance.
• Provide cyber security advice within the defined CA31 assessor scope.
• Help CA31 understand and mitigate cyber security risks affecting capability delivery and operations within the LC4 domain.
• Build and maintain effective relationships with applicable sustainment products, OEM, operational and security stakeholders.

Technical Skills

• Relevant qualifications, industry certification and/or professional experience suitable for eligibility to obtain DCIAB-CSAA endorsement as a Cyber Security Assessor, including CISSP, CISM, ISO 27001 Lead Auditor and IRAP accreditation.
• Strong understanding of ICT architectures, networks, platforms, cyber/security compliance and governance within the Defence environment.
• Demonstrated ability to lead security cyber audits, document outcomes and deliver reports.
• Understanding of modern networking, computers and operating systems.
• Comprehensive understanding of Defence systems, including C4 capabilities, is highly desired.
• Previous Defence, Army or CASG experience is highly desired.
• Experience in assessing and evaluating risk is highly desired.
• Understanding of the One Defence Capability System is required.

Selection Criteria

Essential

1. Have an Australian Government security clearance of at least NV1.
2. Ability to work on site for a minimum of 3 days a week
3. Qualifications / experience as per above