EL2 Lead Security Architect

Softtest pays pty ltd; Canberra; On-site; AUD 190,000 - 230,000; Full time

Job summary

Softtest pays pty ltd, on behalf of the NDIA, is seeking an EL2 Senior Cyber Security Specialist in Canberra. The role involves complex security design, risk evaluation, and stakeholder engagement to ensure compliance with PSPF and ISM standards.

You will lead security architecture efforts, conduct risk assessments, and guide IT security controls across diverse technology domains. You will present findings to senior forums and collaborate with internal teams to reduce technology risk and improve

Qualifications

• Experience designing cyber security architectures for large organisations.
• Proven ability to conduct and document risk assessments.
• Knowledge of PSPF, ISM and related security frameworks.

Responsibilities

• Develop cyber security architecture and security design documents for NDIA internal systems.
• Lead risk assessments and evaluate risk from external connections.
• Ensure compliance with cyber security standards and governance frameworks.
• Resolve complex IT security issues with detailed analysis and reporting to stakeholders.
• Present security findings to senior forums and project teams.

Skills

Cyber security architecture

Risk assessment

Stakeholder management

Security policy & controls

Compliance

Communication to leadership

Design leadership

Job description

Australian Citizens residing in Australia only respond.

Job details

Role: EL2 Senior Cyber Security Specialist

The EL2 Senior Cyber Security Specialist (Labour Hire) is accountable under broad direction to undertake very complex design and security risk assessment work that delivers quality outcomes across the diverse technology functions of the NDIA.

The position is an important position within the NDIA and will have delegated authority and responsibility to resolve issues and risks across wide-ranging activities of substantial depth involving significant detail.

The role will provide design leadership, risk evaluation and decision making and is responsible for actively managing key internal and external stakeholder relationships.

The position is responsible for actively managing key internal and external stakeholder relationships and where required will represent and negotiate on behalf of the NDIA to advance the NDIA's interests across a range of forums.

Key duties and responsibilities

Responsibilities of the role include but are not limited to:

• Developing cyber security architecture and detailed security design documents, including Role Based Access controls for NDIA internal systems.
• Leading and conducting risk assessments for NDIA internal systems and assessing risk from external connections.
• Undertaking compliance activities in relation to cyber security standards within the Agency aligned to cyber security architecture and industry best practice.
• Resolving complex IT related issues and risks across wide-ranging activities of substantial depth involving significant detail. Developing and participating in the implementation of NDIA initiatives focused on the reduction of technology risk, governance and compliance to policies and regulatory compliance.
• Developing and applying IT security standards, policy, procedures, and controls for managing risks.
• Supporting various business areas by ensuring stakeholders adequately address all relevant compliance standards such as the PSPF, ISM, Agency Risk Management Frameworks and incident management disciplines.
• Presenting to senior forums, project teams and other groups at a technical and business level and working with a broad range of stakeholders in a collaborative and solution oriented manner.
• Completing and investigating internal and external information security risk and exceptions assessments and documenting and reporting control failures and gaps to stakeholders.

(NOTE: the key responsibilities of the role are based on current priorities and may change over time)