Lead Cyber Analyst

Harrison McMillan; Australia; Hybrid; AUD 120,000 - 180,000; Full time

Job summary

Harrison McMillan is seeking an experienced Lead Cyber Analyst to join a high-performing cyber security team and conduct security risk assessments across complex ICT environments. The role is a long-term 12-month contract with two 12-month extension options, based in Australia with hybrid working arrangements across ACT, NSW, VIC and beyond.

A Negative Vetting Level 1 security clearance is required. You will engage with technical and non-technical stakeholders, review SSPs/SSP-As, and provide

Qualifications

• 3–5 years' experience conducting security risk assessments within government cyber security teams.
• Experience assessing Azure Cloud, legacy ICT, AI technologies and complex environments.
• Knowledge of PSPF, ISM and Essential Eight requirements.
• Ability to communicate risks to technical and non-technical stakeholders.

Responsibilities

• Conduct security risk assessments for ICT systems and applications
• Review and contribute to System Security Plans (SSPs) and SSP annexes
• Provide cyber security advice aligned with PSPF, ISM and Essential Eight requirements
• Assess Azure cloud, legacy ICT, AI technologies and complex enterprise environments
• Engage with technical and non-technical stakeholders to communicate risks and recommendations
• Support initiatives that strengthen organisational cyber security posture
• Present security findings and artefacts to senior stakeholders and executive audiences

Skills

Security risk assessments

Azure Cloud

PSPF/ISM/Essential Eight

Stakeholder communication

Networking knowledge

Job description

At Harrison McMillan, our mission is simple: to change lives, one placement at a time. As a trusted recruitment partner to government and industry, we connect exceptional people with opportunities where they can make a genuine impact.

Harrison McMillan is seeking an experienced Lead Cyber Analyst to join a high-performing cyber security team and conduct security risk assessments across complex ICT environments.

This is a long-term 12-month contract with 2 x 12-month extension options and is based in Australia-wide locations including ACT, NSW, VIC, QLD, WA, SA, TAS and NT. Hybrid working arrangements are available, with occasional attendance at the Canberra office or a regional office as required.

Due to the nature of this role, an existing Negative Vetting Level 1 security clearance is required.

Key responsibilities

• Conduct security risk assessments for ICT systems and applications
• Review and contribute to System Security Plans (SSPs) and System Security Plan Annexes (SSP-As)
• Provide cyber security advice aligned with PSPF, ISM and Essential Eight requirements
• Assess Azure cloud, legacy ICT, AI technologies and complex enterprise environments
• Engage with technical and non-technical stakeholders to communicate risks and recommendations
• Support initiatives that strengthen organisational cyber security posture
• Present security findings and artefacts to senior stakeholders and executive audiences

About you

• 3-5 years' experience conducting security risk assessments within a government cyber security team
• Demonstrated experience assessing Azure Cloud, legacy ICT systems, AI technologies and complex systems
• Current knowledge and experience applying PSPF, ISM and Essential Eight requirements
• Experience liaising with both technical and non-technical stakeholders regarding cyber security risks and recommendations
• Strong written and verbal communication skills, including executive-level briefing experience
• Demonstrated understanding of networking infrastructure.
• Understanding of Operational Technologies (OT) (Desirable)

RFQ Closing Date: 30 September 2026