Lead Cyber Advisor (IRAP Assessor)

Paxus Australia Pty Ltd.; Canberra; On-site; AUD 140,000 - 200,000; Full time

Job summary

Paxus Australia Pty Ltd. is seeking a Lead Cyber Advisor (IRAP Assessor) to lead cyber security assessments for complex ICT systems in the ACT. The role requires conducting risk analyses, threat modelling, and providing risk-based advice throughout the lifecycle.

Onsite ACT location with potential flexible arrangements depending on operations. Essential requirements include Australian citizenship and an active NV1 security clearance, plus at least five years’ experience in entity assessments

Qualifications

• Minimum five years in cyber assessments.
• Active NV1 clearance; IRAP assessor knowledge preferred.
• Strong communication with stakeholders.
• Understanding of ICT architectures and security controls.
• Australian citizenship required for clearance eligibility.

Responsibilities

• Lead cyber security assessments for complex systems and projects.
• Conduct risk assessments, threat modelling, business impact analysis and control reviews.
• Analyse system architectures, configurations and evidence to identify vulnerabilities and security gaps.
• Assess residual risk and recommend mitigation strategies.
• Prepare security assessment reports, briefings and decision records.
• Advise stakeholders and mentor cyber security practitioners.

Skills

5+ yrs exp

IRAP Assessor

Stakeholder comms

ICT security

NV1 clearance

Job description

Lead Cyber Advisor (IRAP Assessor)

Location: ACT, onsite
Contract: 12 months, with one 12-month extension option
Estimated start: March 2027
Hours: Up to 40 hours per week
Level: EL1 equivalent

We are seeking a Lead Cyber Advisor to assess complex ICT systems, identify and evaluate cyber security risks, and provide advice that supports risk-based decisions throughout the system lifecycle.

The role is onsite in the ACT. Flexible work arrangements may be negotiated if operational requirements allow.

Key responsibilities

• Lead cyber security assessments for complex systems and projects.
• Conduct risk assessments, threat modelling, business impact analysis and control reviews.
• Analyse system architectures, configurations and evidence to identify vulnerabilities and security gaps.
• Assess residual risk and recommend mitigation strategies.
• Prepare security assessment reports, briefings and decision records.
• Advise stakeholders and mentor cyber security practitioners.
• Help improve security policies, assessment methods, tools and reporting standards.

Essential requirements

• Australian citizenship and an active AGSVA NV1 security clearance. Clearance upgrades will not be sponsored for this role.
• At least five years’ demonstrated experience conducting entity assessments in a cyber role.
• Strong technical knowledge of ICT systems, architectures and security controls.
• Excellent stakeholder engagement and communication skills.
• An understanding of the role of an IRAP Assessor and relevant security policies and frameworks.

Desirable

• Endorsement as an IRAP Assessor.
• Other relevant, industry-recognised cloud and cyber security certifications.

Suitability assessment

Candidates must be willing to undergo an organisational suitability assessment (OSA), and the successful candidate must obtain it before commencing. The assessment includes a psychological questionnaire and interview. Questions may cover personal relationships, living circumstances, values, finances, physical and mental health history including substance use, and any civil or military record.

Paxus values diversity and welcomes applications from Indigenous Australians, people from diverse cultural and linguistic backgrounds and people living with a disability. If you require an adjustment to the recruitment process, including the application form in an alternate format, please contact me on the above contact details.