Information Technology Security Officer

Business Review Group; Canberra; On-site; AUD 120,000 - 160,000; Full time

Job summary

Business Review Group in Canberra seeks an Information Technology Security Officer to support IC3 SPO across ADF EFB and AMTACS. The IT Security Manager will maintain security posture, support accreditation and advise Defence stakeholders, working with system management, engineering and external providers to keep security aligned with policy.

The role requires strong governance, cyber risk management and the ability to produce high-quality documentation for a complex defence ICT environment.

Qualifications

• Formal qualifications in Information Security, Cyber Security, Information Technology or a related discipline.
• Experience performing ITSM duties within Defence, Government or a complex enterprise ICT environment.
• Strong knowledge of ISM, Defence Security Principles Framework (DSPF) and Defence policies.
• Experience supporting security accreditation and risk assessments.
• Experience with Mobile Device Management (MDM) and cloud-hosted environments.
• Ability to communicate to diverse stakeholders.

Responsibilities

• Monitor and maintain the cyber security posture of ADF EFB and AMTACS.
• Investigate and manage cyber security incidents.
• Provide security risk, compliance and governance advice.
• Support system security accreditation, assessment and authorisation activities.
• Maintain security documentation, risk assessments and governance artefacts.
• Report security matters to system owners and relevant stakeholders.
• Engage with Defence stakeholders, industry partners and support providers.
• Maintain system authorisation throughout the capability lifecycle.

Skills

Information Security

Cyber Security

Information Technology

Education

InfoSec / IT Qualifications

Tools

MDM Solutions

Job description

INFORMATION TECHNOLOGY SECURITY OFFICER

SPO: IC3SPO

Project: CAF16

Skill Level: Level 2

Location: ACT

Remote Work: No – ACT-based candidates only

Supported Capabilities: Australian Defence Force Electronic Flight Bag (ADF EFB) and Air Movements Tasking and Control System (AMTACS)

Role Overview

The Information Technology Security Officer will support the Integrated Command, Control and Communications Systems Program Office (IC3 SPO) across the ADF Electronic Flight Bag and AMTACS capabilities.

The successful candidate will act as the Information Technology Security Manager (ITSM) for both systems and will be responsible for maintaining their security posture, supporting system accreditation and authorisation, managing cyber security risks and incidents, and providing security advice to Defence stakeholders.

The role will work closely with system management, engineering, capability management and external support providers to ensure security requirements remain aligned with Defence policy and operational priorities.

Key Responsibilities

• Monitor and maintain the cyber security posture of ADF EFB and AMTACS.
• Investigate and manage cyber security incidents.
• Provide security risk, compliance and governance advice.
• Support system security accreditation, assessment and authorisation activities.
• Maintain security documentation, risk assessments and governance artefacts.
• Report security matters to system owners and relevant stakeholders.
• Support sustainment and operational outcomes for both capabilities.
• Engage with Defence stakeholders, industry partners and support providers.
• Maintain system authorisation throughout the capability lifecycle.
• Support continuous improvement of security controls and practices.

Essential Experience And Skills

Candidates should demonstrate:

• Formal qualifications in Information Security, Cyber Security, Information Technology or a related discipline.
• Experience performing Information Technology Security Manager (ITSM) duties within Defence, Government or a complex enterprise ICT environment.
• Strong practical knowledge of:
  • Australian Government Information Security Manual (ISM).
  • Defence Security Principles Framework (DSPF).
  • Relevant Defence and Commonwealth cyber security policies.
• Experience supporting security accreditation, assessment and authorisation activities.
• Experience preparing and maintaining security documentation and risk assessments.
• Experience administering, supporting or governing Mobile Device Management (MDM) solutions, including cloud-hosted environments and mobile security controls.
• Experience providing cyber security advice to business, operational and technical stakeholders.
• Strong technical, governance and administrative documentation skills.
• Strong analytical, problem-solving and cyber risk management capability.
• Excellent written and verbal communication and stakeholder engagement skills.
• Ability to work independently under broad direction and manage competing priorities.

Desirable Experience

The following would be highly regarded:

• Experience supporting Defence aviation capabilities.
• Experience engaging with Capability Management representatives such as Headquarters Air Command, Air Movements Control Centre or the ADF EFB user community.
• Understanding of emerging Defence and Commonwealth cyber security policy requirements.
• Experience with cloud-hosted environments, SaaS platforms and mobile workforce technologies.
• Experience with Microsoft 365 security and compliance capabilities.
• Knowledge of contemporary mobile security, endpoint management and secure mobility architectures within Defence or Government environments.

Personal Attributes

• Proactive, motivated and outcome focused.
• Collaborative and confident engaging across multiple stakeholder groups.
• Well organised with strong time-management skills.
• Capable of exercising sound judgement in complex or high-pressure environments.
• Committed to remaining current with emerging cyber security threats, technologies and regulatory requirements.

Candidate Profile

This opportunity would suit an experienced IT Security Officer, Information Technology Security Manager, Cyber Security Advisor, Security Assurance Analyst or System Security Specialist with a strong background in Defence or Government environments.

The strongest candidates will combine practical experience across ITSM responsibilities, ISM/DSPF compliance, security accreditation, cyber risk management and MDM/mobile security, with the ability to produce high-quality documentation and engage confidently with technical, operational and capability stakeholders.