Cyberworthiness Security Analyst

Boeing; Brisbane; On-site; AUD 120,000 - 160,000; Full time

Benefits offered by this job

Flexible working options

Study assistance

Salary packaging

Employee Incentive Program

Global opportunities

Job summary

Boeing Defence Australia seeks a Cyberworthiness System Analyst to support the ACEASP program at RAAF Base Amberley. The role focuses on cyber hygiene, security risk management, and ICT security authorisation within a defence engineering environment.

You will assess risks, advise on mitigations, and contribute to the development of security policies while engaging with diverse stakeholders and maintaining compliance with defence security frameworks.

Qualifications

• Experience with Australian Defence security frameworks and policies.
• Understanding of ICT cybersecurity practice development and implementation.
• Experience with authorisation processes for Australian government (Defence) systems.
• Ability to communicate complex security concepts to diverse audiences.
• Willingness to obtain/maintain a security clearance.

Responsibilities

• Perform security risk assessments aligned to the Cybersecurity Risk Management Framework.
• Conduct security authorisation and assessment activities for ICT systems.
• Advise stakeholders on maintaining ICT security and authorisation, including implications of modifications.
• Evaluate emerging security issues; identify risks and coordinate actions.
• Deliver security design advice to meet control intent in engineering projects.
• Create and maintain security policies, procedures, audits and assessments.
• Test and deploy risk mitigation processes and tools; monitor outcomes.

Skills

Security risk assessments

Security authorisation

Stakeholder communication

Information security

Cybersecurity practices

Education

Industry-recognised information security qualification (CISSP, CRISC, ISO 27001, IRAP)

Job description

About usBoeing Defence Australia is shaping the future of aerospace and delivering some of the nation's most important programs for the Australian Defence Force.Joining us is a chance to make your mark, working with a diverse team that is united in pushing the boundaries of imagination and excellence.We currently employ more than 2,500 people across 14 sites in Australia and three international locations and have a range of opportunities available as we plan for future growth.The opportunityWe are seeking a talented Cyberworthiness System Analyst to join the team located at RAAF Base Amberley as part of the Air Combat Electronic Attack Sustainment Program (ACEASP) directly supporting the Growler and Super Hornet Air Combat capability. This position will work within the Cyberworthiness support element, with the ultimate goal of ensuring cyber hygiene and providing cyber assurance to the Royal Australian Air Force (RAAF).Responsibilities:Perform security risk assessments aligned to the Cybersecurity Risk Management Framework.Conduct security authorisation and assessment activities for ICT systems.Advise stakeholders on maintaining ICT security and authorisation, including the implications of required modifications.Evaluate and respond to emerging security issues; evaluate capability risks/gaps and take and/or coordinate actions to meet objectives.Participate in evaluation of process effectiveness and identify areas for improvement.Deliver sound and timely information security design advice; recommend technological or procedural solutions to meet security control intent in support of engineering projects.Analyse and determine the risk associated with potential vulnerabilities; identify root causes, prioritise threats, and recommend and/or implement corrective actions.Test and deploy risk mitigation processes and tools; monitor outcomes and take action as required.Create and maintain security policies, procedures, audits, and assessments.Experience/QualificationsWorking knowledge of Australian Defence security frameworks and associated policies and procedures, including familiarity with the Australian Cyber Security Centre Information Security Manual.An understanding of the development and implementation of information security practices in an engineering environment.Understanding of ICT cybersecurity practice development and implementation.Experience with the authorisation processes for Australian government (Defence) systems and developing associated authorisation document packs.Strong written and verbal communication skills with the ability to clearly articulate complex security concepts to a broad and diverse audience.Sound information security knowledge across some or all of the following environments is desirable:Network connectivity and configuration.Windows client-server systems.Linux client-server systems.Support and maintenance of in‑house hardware/software systems.Engineering Change Management processes.A desire to work as part of a dynamic team supporting a diverse range of technology.Industry-recognised information security qualification (CISSP, CRISC, ISO 27001, IRAP, etc.) and/or relevant experience.Ability to obtain a Security Clearance - the preferred applicant will be required to successfully undergo the security clearance vetting process for Negative Vetting Level 2. The preferred applicant MUST be willing to disclose all relevant and required information and MUST have lived in Australia, or have a checkable background, for at least the preceding ten years.CultureWe are committed to building a diverse and inclusive workplace. Female applicants, people of Aboriginal or Torres Strait Island descent and ex-defence personnel are encouraged to apply.BenefitsFlexible working optionsStudy assistanceSalary packagingEmployee Incentive ProgramGlobal opportunitiesFind out more about Boeing Defence Australia here.