EL1 Lead Cyber Advisor

Softtest pays pty ltd; Canberra; On-site; AUD 120,000 - 150,000; Full time

Job summary

NDIA is seeking an EL1 IT Disaster Recovery & Cyber Resilience Specialist in Canberra to lead the development, governance and continuous improvement of ICT Disaster Recovery capabilities. The role provides strategic direction and specialist advice to ensure services can be recovered in line with business needs, regulatory obligations and risk appetite.

You will work closely with technical owners, business stakeholders and executive leadership to uplift resilience, with delegated authority to

Responsibilities

• Design, implement, and maintain enterprise ICT Disaster Recovery capabilities and governance.
• Develop and maintain ICT Disaster Recovery Strategy, Policy and Standards.
• Coordinate disaster recovery governance, reporting and assurance activities.
• Oversee Technical Recovery Runbook development across Technology functions.
• Manage ICT Disaster Recovery audit and remediation activities.
• Integrate DR requirements with architecture, projects and operations.
• Collaborate with stakeholders to align DR with broader resilience activities and IT infrastructure concepts.
• Understand cyber threat tactics and their impact on Disaster Recovery.
• Implement contingency planning frameworks and standards (e.g., NIST 800-34, ISM, ISO 27001/22301).
• Conduct tabletop exercises, tests, and post-mortem reviews.
• Implement cloud-based continuity best practices and solutions.
• Align DR practices with enterprise risk management and audit expectations.

Job description

Australian Citizens with NV1 Clearance residing in Australia only respond.

Job details

Role: EL1 IT Disaster Recovery & Cyber Resilience Specialist

The EL1 IT Disaster Recovery & Cyber Resilience Specialist is responsible for supporting the development, governance, assurance and continuous improvement of the ICT Disaster Recovery capability.

The role provides strategic direction and specialist advice to ensure technology services can be recovered in line with business recovery requirements, regulatory obligations and the organisations risk appetite.

The position works closely with technical owners, business stakeholders, and executive leadership to uplift resilience across the Agency's technology environment. The position will have delegated authority and responsibility to uplift Disaster Recovery within the agency. The role requires leadership, technical cyber security and disaster recovery expertise, an ability to lead and mentor junior staff and will require a person who is able to provide risk advice, security assurance and sound decision making to key NDIA decision makers.

The position is responsible for actively managing key internal and external stakeholder relationships and where required will represent and negotiate on behalf of the NDIA to advance the NDIA's interests across a range of forums.

Key duties and responsibilities

Responsibilities of the role include, but are not limited to:

• Designing, implementing and maintaining enterprise-level ICT Disaster Recovery capabilities, including disaster recovery plans, technical recovery runbooks, testing programs and recovery governance arrangements. Assessing organisational risk and capability gaps related to crisis management and infrastructure resilience.
• Development and maintenance of ICT Disaster Recovery Strategy, Policy and Standards.
• Coordination of disaster recovery governance, reporting and assurance activities.
• Oversight of Technical Recovery Runbook development across Technology functions.
• Management of ICT Disaster Recovery audit and remediation activities.
• Integration of DR requirements into architecture, project delivery and operational processes.
• Collaborating with stakeholders to integrate disaster recovery requirements with broader resilience and continuity activities. Understanding of IT infrastructure concepts and DR technologies (e.g., backup systems, cloud platforms).
• Understanding on cyber threat tactics, techniques and procedures and relay the impact on Disaster Recovery.
• Implementing contingency planning frameworks and standards (e.g., NIST 800-34, ISM, ISO 27001 / 22301).
• Conducting tabletop exercises, test execution, and post-mortem reviews.
• Implementing cloud-based continuity best practices and solutions.
• Aligning DR practices with enterprise risk management frameworks and audit expectations.

(NOTE: the key responsibilities of the role are based on current priorities and may change over time)