Lead Cyber Advisor

Whizdom; Canberra; On-site; AUD 130,000 - 155,000; Full time

Job summary

Whizdom is seeking a Lead Cyber Advisor to provide specialist ICT security guidance across complex technology environments. You will conduct cyber security assessments, risk analyses and assurance activities, delivering trusted advice to support risk-based decisions throughout the system lifecycle.

The role requires strong stakeholder engagement, ability to translate findings for business outcomes, and senior-level expertise in assessment, assurance and governance within high-security government

Qualifications

• Minimum five years of cyber security assessment experience in complex ICT environments.
• Strong knowledge of ICT systems, architectures and security controls.
• Ability to translate technical findings for business stakeholders.
• Experience preparing security assessment reports and executive briefings.

Responsibilities

• Lead cyber security assessments for complex systems and projects.
• Conduct risk assessments, threat modelling and control reviews.
• Analyse architectures, configurations and evidence to find vulnerabilities.
• Assess residual risks and propose mitigation strategies.
• Prepare assessment reports and executive briefings for decision-makers.
• Provide expert cyber security advice to technical and non-technical stakeholders.
• Mentor junior practitioners and support capability uplift.
• Contribute to security policies, methodologies, tools and reporting standards.

Skills

Threat modelling

Risk assessment

Stakeholder engagement

Security governance

Executive briefings

Mentoring

Tools

IRAP

Job description

About the Client

Our client is a high-profile federal government organisation operating within Australia's national security environment. The organisation plays a critical role in protecting Australia against evolving cyber threats and delivering services that support the nation's security objectives.

About the Role

As the Lead Cyber Advisor, you will provide specialist ICT security advice through the delivery of cyber security assessment and assurance services. Working across complex technology environments, you will assess cyber risks, identify vulnerabilities, and provide trusted advice that supports risk-based decision-making throughout the system lifecycle.

Key responsibilities include

• Leading cyber security assessments for complex systems and projects
• Conducting risk assessments, threat modelling, business impact analysis and control reviews
• Analysing system architectures, configurations and technical evidence to identify vulnerabilities and security gaps
• Assessing residual risks and recommending appropriate mitigation strategies
• Preparing security assessment reports, executive briefings and decision records
• Providing expert cyber security advice to technical and non-technical stakeholders
• Mentoring cyber security practitioners and supporting capability uplift initiatives
• Contributing to the enhancement of security policies, assessment methodologies, tools and reporting standards

The Successful Candidate

You are an experienced cyber security professional with a strong background in assessment, assurance and risk management. You can confidently engage a broad range of stakeholders, translate complex technical findings into meaningful business outcomes, and provide trusted security advice in high-security environments.

To be successful, you will demonstrate

• A minimum of five years' experience conducting cyber security assessments within complex ICT environments
• Strong technical knowledge of ICT systems, architectures and security controls
• Experience identifying, assessing and communicating cyber security risksExcellent stakeholder engagement, communication and relationship-building skills
• Strong analytical and problem-solving abilities
• Experience preparing security assessment reports, recommendations and executive briefings
• A sound understanding of security governance frameworks, policies and assurance processes
• The ability to mentor and support other cyber security practitioners

The following will be highly regarded

• ASD-endorsed IRAP Assessor status
• Cloud security certifications and other recognised cyber security qualifications
• Experience working within government, defence or national security environments

Candidates must also be willing to undergo an Organisational Suitability Assessment (OSA) prior to engagement.

We value diversity and welcome applications from Indigenous Australians, people from diverse cultural and linguistic backgrounds and people living with a disability.

Location: The role is based in Canberra ACT.

Contract terms: 12 months from commencement date, plus 2x 12 month extensions

Experience Level: Senior – EL1 Equivalent

Security Requirements: Candidates must hold a minimum NV1 (Negative Vetting 1) security clearance. Our client is not prepared to upgrade an existing clearance for this position. An OSA (Organisational Suitability Assessment) will be required for this position.

Candidates will need to be willing to undergo pre-employment screening checks which may include, ID and work rights, security clearance verification and any other client requested checks.

Applications open until 8am 06 October 2026.