El1 Lead Cyber Advisor

Softtest Pays Pty Ltd; Adelaide; On-site; AUD 140,000 - 190,000; Full time

Job summary

NDIA seeks an EL1 IT Disaster Recovery & Cyber Resilience Specialist to lead the development, governance and continuous improvement of ICT Disaster Recovery capabilities. You will provide strategic direction, risk advice and security assurance to executives and technical owners across the agency.

The role collaborates with stakeholders to uplift resilience, manage runbooks, audits and remediation, and align DR with enterprise risk management frameworks and audit expectations.

Qualifications

• Experience in ICT disaster recovery and cyber resilience
• Ability to provide risk advice and security assurance to senior stakeholders
• Leadership/mentoring of junior staff or peers
• Understanding of regulatory obligations and enterprise risk management

Responsibilities

• Design, implement and maintain ICT Disaster Recovery capabilities and runbooks
• Develop and govern DR strategy, policy and standards
• Coordinate DR governance, reporting and assurance activities
• Oversee technical recovery runbooks across technology functions
• Manage DR audit and remediation activities
• Integrate DR requirements with architecture, projects and operations
• Collaborate with stakeholders to align DR with broader resilience initiatives
• Provide guidance on cyber threat impact on DR and contingency planning
• Conduct tabletop exercises, tests and post-mortems
• Advise NDIA decision makers on risk and security matters

Skills

Disaster Recovery

Cyber Resilience

Governance

Risk Advice

Security Assurance

Leadership

Job description

Australian Citizens with NV1 Clearance residing in Australia only respond.

Job details

Role: EL1 IT Disaster Recovery & Cyber Resilience Specialist

The EL1 IT Disaster Recovery & Cyber Resilience Specialist is responsible for supporting the development, governance, assurance and continuous improvement of the ICT Disaster Recovery capability.

The role provides strategic direction and specialist advice to ensure technology services can be recovered in line with business recovery requirements, regulatory obligations and the organisations risk appetite.

The position works closely with technical owners, business stakeholders, and executive leadership to uplift resilience across the Agency's technology environment. The position will have delegated authority and responsibility to uplift Disaster Recovery within the agency. The role requires leadership, technical cyber security and disaster recovery expertise, an ability to lead and mentor junior staff and will require a person who is able to provide risk advice, security assurance and sound decision making to key NDIA decision makers.

The position is responsible for actively managing key internal and external stakeholder relationships and where required will represent and negotiate on behalf of the NDIA to advance the NDIA's interests across a range of forums.

Key duties and responsibilities

Responsibilities of the role include, but are not limited to:

• Designing, implementing and maintaining enterprise-level ICT Disaster Recovery capabilities, including disaster recovery plans, technical recovery runbooks, testing programs and recovery governance arrangements. Assessing organisational risk and capability gaps related to crisis management and infrastructure resilience.
• Development and maintenance of ICT Disaster Recovery Strategy, Policy and Standards.
• Coordination of disaster recovery governance, reporting and assurance activities.
• Oversight of Technical Recovery Runbook development across Technology functions.
• Management of ICT Disaster Recovery audit and remediation activities.
• Integration of DR requirements into architecture, project delivery and operational processes.
• Collaborating with stakeholders to integrate disaster recovery requirements with broader resilience and continuity activities. Understanding of IT infrastructure concepts and DR technologies (e.g., backup systems, cloud platforms).
• Understanding on cyber threat tactics, techniques and procedures and relay the impact on Disaster Recovery.
• Implementing contingency planning frameworks and standards (e.g., NIST 800-34, ISM, ISO 27001 / 22301).
• Conducting tabletop exercises, test execution, and post-mortem reviews.
• Implementing cloud-based continuity best practices and solutions.
• Aligning DR practices with enterprise risk management frameworks and audit expectations.

(NOTE: the key responsibilities of the role are based on current priorities and may change over time)