Defence Cyber Security Assessor

Client 1; Canberra; Hybrid; AUD 120,000 - 160,000; Full time

Job summary

Client 1 in Canberra and Melbourne seeks an experienced Cyber Security Assessor (SFIA SCTY Level 5) to conduct independent assessments across Defence ICT environments, evaluate security controls, and deliver evidence-based reports to technical and senior stakeholders.

The role requires strong stakeholder engagement, understanding of Defence and Australian Government security frameworks, and willingness to work in a hybrid model with occasional travel to Defence sites.

Qualifications

• Experience conducting ICT security assessments, audits, assurance reviews or cyber risk engagements.
• Experience assessing complex ICT systems, networks, cloud platforms and emerging technologies.
• Strong cyber risk assessment and reporting capabilities.
• Knowledge of the Australian Government Information Security Manual (ISM).
• Knowledge of the Protective Security Policy Framework (PSPF).
• Knowledge of the Defence Security Principles Framework (DSPF).
• Understanding of Defence assessment and authorisation processes.
• Strong understanding of cyber security risk management methodologies and contemporary cyber threats.
• Excellent written and verbal communication skills.
• Ability to communicate technical risks to both technical and non-technical audiences.
• High attention to detail and report writing capability.

Responsibilities

• Conduct cyber security assessments in accordance with Defence and Australian Government security policies, frameworks and methodologies.
• Assess the effectiveness of security controls and identify threats, vulnerabilities and risks.
• Produce clear, evidence-based assessment reports, risk briefs and recommendations.
• Engage with project teams, system owners, authorising delegates and senior stakeholders.
• Support assessment prioritisation, assurance activities and reporting requirements.
• Provide cyber security advice and risk-based recommendations.
• Maintain independence, objectivity and professional integrity throughout assessment activities.
• Identify and declare any actual, perceived or potential conflicts of interest.

Skills

ICT security assessments

Security risk reporting

Communication skills

Threat and risk analysis

Independent assessment

Education

CISSP

CISM

GSLC

CISA

CRISC

GSNA

ISO 27001 Lead Auditor

PCI QSA

ASD IRAP Assessor

OSCP

Job description

Client 1 in Canberra and Melbourne seeks an experienced Cyber Security Assessor (SFIA SCTY Level 5) to conduct independent assessments across Defence ICT environments, evaluate security controls, and deliver evidence-based reports to technical and senior stakeholders.

The role requires strong stakeholder engagement, understanding of Defence and Australian Government security frameworks, and willingness to work in a hybrid model with occasional travel to Defence sites.