Defence Cyber Security Certification Consultant

Really Awesome People; Canberra; Hybrid; AUD 90,000 - 130,000; Full time

Job summary

Really Awesome People is seeking an experienced Defence Cyber Security Certification Consultant to support the Land Communications & Specialist Systems SPO within the Department of Defence. The role involves system security assessment, authorisation and assurance services across critical Defence capabilities.

The position can be performed Australia-wide with occasional travel; Canberra or Melbourne staff may attend the office part-time. NV1 clearance or higher is mandatory.

Qualifications

• Current Australian Government NV1 security clearance.
• Eligibility for DCIAB-CSAA endorsement as a Cyber Security Assessor.
• CISSP/CISM, ISO 27001 Lead Auditor or comparable experience.
• Strong ICT architecture, networks, platforms and OS knowledge.
• Defence cyber security governance experience.
• Experience leading security assessments and producing formal reports.
• Capacity to work onsite for at least three days per week when required.

Responsibilities

• Conduct Defence System Assessment and Authorisation activities.
• Undertake Operational Effectiveness Reviews and Design Effectiveness Reviews.
• Assess and audit security controls across Defence capability systems.
• Develop Security Assessment Reports, ATO briefs, risk statements and remediation recommendations.
• Identify and assess vulnerabilities from security exceptions and architectural weaknesses.
• Review security documentation against ISM, PSPF, Defence Security Policy Framework and CSAA requirements.
• Undertake structured threat modelling and cyber risk assessments.
• Support Change Control Boards with security risks, mitigations and treatment options.
• Provide trusted cyber security advice to Defence, industry partners, OEMs and stakeholders.

Skills

NV1 clearance

Defence cyber security

Security governance

Education

DCIAB-CSAA endorsement

CISSP

CISM

ISO 27001 Lead Auditor

Job description

Defence Cyber Security Certification Consultant

Australia-wide | NV1 Clearance Required | Initial 6-Month Contract

Really Awesome People is seeking an experienced Defence Cyber Security Certification Consultant to support the Land Communications & Specialist Systems SPO within the Department of Defence.

Embedded within the Land C4 Systems Branch, you will provide system security assessment, authorisation and assurance services across critical Defence communications capabilities.

The role may be performed from locations across Australia, although occasional travel may be required. Candidates based in Canberra or Melbourne will be expected to attend the office part-time.

Key responsibilities

• Conduct Defence System Assessment and Authorisation activities.
• Undertake Operational Effectiveness Reviews and, where appropriate, Design Effectiveness Reviews.
• Assess and audit security controls across Defence capability systems.
• Develop Security Assessment Reports, ATO briefs, risk statements and remediation recommendations.
• Identify and assess vulnerabilities arising from security exceptions, software defects and architectural weaknesses.
• Review security documentation against the ISM, PSPF, Defence Security Policy Framework and CSAA requirements.
• Undertake structured threat modelling and cyber risk assessments.
• Support Change Control Boards with security risks, mitigations and treatment options.
• Provide trusted cyber security advice to Defence, industry partners, OEMs and operational stakeholders.

Mandatory requirements

• Current Australian Government NV1 security clearance or higher.
• Relevant qualifications, certifications or professional experience supporting eligibility for DCIAB-CSAA endorsement as a Cyber Security Assessor.
• This may include CISSP, CISM, ISO 27001 Lead Auditor, IRAP accreditation or comparable experience.
• Strong understanding of ICT architecture, networks, platforms and operating systems.
• Demonstrated Defence cyber security, compliance and governance experience.
• Experience leading security assessments or cyber audits and producing formal reports.
• Capacity to work onsite for a minimum of three days per week where required.
• Compliance with Defence Post-Separation Employment requirements.

Previous experience within Defence, Army, CASG or C4 capability environments will be highly regarded.

Contract: 30 September 2026 to 31 March 2027

Extension: Possible, subject to Commonwealth requirements

Location: Australia-wide, with occasional travel

Clearance: NV1 or higher

#CyberSecurity #DefenceJobs #CyberSecurityConsultant #NV1 #CASG #C4Systems #DefenceCareers #GovernmentContracting #ReallyAwesomePeople