Information Technology Security Officer (PROJ-4837)

Remote Pty Ltd; Canberra; On-site; AUD 120,000 - 160,000; Full time

Job summary

Remote Pty Ltd is seeking an Information Technology Security Officer to support the Australian Defence Force EFB and AMTACS capabilities. You will oversee security posture, accreditation processes, and risk management across the capability lifecycle, coordinating with Defence stakeholders and industry partners to maintain system authorisation.

Formal information security qualifications and Defence ICT experience are required, with strong ISM and DSPF knowledge and excellent documentation skills

Qualifications

• Demonstrated ability to perform Information Technology Security Officer duties within Defence, Government or a complex enterprise ICT environment.
• Strong knowledge of the Australian Government Information Security Manual (ISM) and Defence Security Principles Framework (DSPF).
• Experience supporting security accreditation, assessment and authorisation activities with security documentation and risk assessments.

Responsibilities

• Act as the Information Technology Security Officer for the ADF EFB and AMTACS capabilities.
• Monitor, maintain and report on the security posture of systems throughout the capability lifecycle.
• Support security accreditation, assessment and authorisation activities, including maintenance of security documentation and risk assessments.
• Investigate, manage and report cyber security incidents and issues.
• Provide cyber security, risk and compliance advice to system owners, operational teams, project stakeholders and support providers.
• Support governance and security of Mobile Device Management (MDM), cloud environments and mobile platforms.
• Identify and assess cyber security risks and recommend controls and improvements.
• Ensure activities align with ISM, DSPF and Defence policy; coordinate with Defence stakeholders.

Skills

Analytical thinking

Cyber security risk management

Written & verbal communication

Independent work

Education

Formal qualifications in information security/cyber security/IT

Job description

Remote is seeking an Information Technology Security Officer to work through one of our industry partners in support of the Integrated Command, Control and Communications Systems Program Office (IC3 SPO). The role will support the Australian Defence Force Electronic Flight Bag (ADF EFB) and Air Movements Tasking and Control System (AMTACS) capabilities.The successful candidate will oversee the security posture of both systems, including security monitoring, incident management, risk and compliance advice, stakeholder reporting, and maintenance of accreditation and governance documentation. The role will work closely with Defence stakeholders, industry partners and support providers to ensure cyber security risks are effectively managed and system authorisation is maintained throughout the capability lifecycle. (MSP Oct 26)##### Role Description**Key Responsibilities*** Act as the Information Technology Security Officer for the ADF EFB and AMTACS capabilities.* Monitor, maintain and report on the security posture of systems throughout the capability lifecycle.* Support security accreditation, assessment and authorisation activities, including the maintenance of security documentation and risk assessments.* Investigate, manage and report cyber security incidents and security-related issues.* Provide cyber security, risk and compliance advice to system owners, operational teams, project stakeholders and support providers.* Support the governance and security of Mobile Device Management (MDM) solutions, cloud-hosted environments and mobile platforms.* Identify and assess cyber security risks and recommend appropriate treatments, controls and security improvements.* Ensure security activities remain aligned with the ISM, DSPF, Defence cyber security policy and relevant capability requirements.* Work closely with the EFB System Manager, CAF16 ICT Security Manager and other Defence stakeholders to support sustainment and operational outcomes.* Engage with industry partners and service providers to coordinate security activities and resolve security issues.* Maintain high-quality technical, governance and administrative documentation in support of ongoing system security and authorisation.* Monitor changes to Defence and Commonwealth cyber security requirements and support the implementation of practical security improvements.**Required experience and skills*** Formal qualifications in Information Security, Cyber Security, Information Technology or a related discipline.* Demonstrated experience performing Information Technology Security Officer duties within Defence, Government or a complex enterprise ICT environment.* Strong knowledge and practical application of the Australian Government Information Security Manual (ISM), Defence Security Principles Framework (DSPF) and associated cyber security policies.* Experience supporting system security accreditation, assessment and authorisation activities, including security documentation and risk assessments.* Experience administering, supporting or governing Mobile Device Management (MDM) solutions, including cloud-hosted environments and mobile platform security controls.* Experience providing cyber security advice to business, operational and technical stakeholders.* Strong analytical, problem-solving and cyber security risk management skills.* Ability to produce high-quality technical, governance and administrative documentation, including documentation aligned with Australian Defence writing standards.* Strong written and verbal communication skills, with the ability to engage and influence stakeholders across multiple organisational levels.* Ability to work independently under broad direction, manage competing priorities and deliver practical solutions to complex cyber security challenges.**Desirable experience*** Experience supporting Defence aviation capabilities or working within an aviation-related environment.* Experience providing cyber security support to Capability Management representatives and Defence aviation stakeholders.* Exposure to cloud-hosted environments, Software-as-a-Service (SaaS) platforms and mobile workforce technologies.* Experience with Microsoft 365 security and compliance capabilities.* Knowledge of contemporary mobile security architectures, endpoint management and secure mobility solutions.* Experience monitoring changes to Defence and Commonwealth cyber security policy and implementing associated security improvements.