Lead Cyber Analyst

Peoplebank; Canberra; Hybrid; AUD 110,000 - 150,000; Full time

Job summary

Peoplebank is seeking Cyber Security Risk Assessors to support a Federal Government department across Azure cloud, legacy ICT, and AI environments. You will conduct security risk assessments, develop SSPs, and advise on secure system design to ensure accreditation readiness.

The role requires 3–5 years of government experience, strong knowledge of PSPF, ISM and Essential Eight, and the ability to communicate risks to both technical and non-technical stakeholders.

Qualifications

• 3–5 years' experience conducting cyber security risk assessments in government.
• Experience with Azure Cloud, legacy ICT, AI technologies and complex enterprise environments.
• Strong knowledge of PSPF, ISM, and Essential Eight.
• Experience communicating risks to technical and non-technical stakeholders.

Responsibilities

• Conduct security risk assessments for ICT systems and applications in line with PSPF, ISM, and Essential Eight requirements.
• Review, develop, and maintain security documentation, including System Security Plans (SSPs) and SSP Annexes (SSP-As).
• Assess security risks across Azure cloud environments, legacy systems, AI technologies, and other complex ICT platforms.
• Provide cyber security advice relating to system and application design.
• Present security risks, recommendations, and security artefacts to technical teams and senior executives.
• Collaborate with cross-functional teams to implement security controls and ensure compliance with Australian Government standards.
• Identify opportunities to strengthen the department's overall cyber security posture.
• Support issue resolution and provide guidance on security-related matters.

Skills

Risk assessments

Azure Cloud

Governance

Stakeholder comms

Security documentation

Job description

Cyber Security Risk Assessor | Federal Government | 12 Month Contract | Anywhere Australia

Join a high-performing cyber security team supporting critical government systems and initiatives. We are seeking multiple experienced Cyber Security Risk Assessors to contribute to the security posture of a large Federal Government department. This is an exciting opportunity to work across modern cloud platforms, legacy environments, AI technologies, and complex ICT systems while ensuring compliance with Australian Government security frameworks.

The Opportunity As a Cyber Security Risk Assessor, you will be responsible for conducting comprehensive security risk assessments and providing expert advice to support secure system design and accreditation activities. Working within a fast-paced ICT cyber security environment, you will collaborate with technical and non-technical stakeholders to identify risks, recommend mitigation strategies, and develop key security documentation.

Key Responsibilities

• Conduct security risk assessments for ICT systems and applications in line with PSPF, ISM, and Essential Eight requirements.
• Review, develop, and maintain security documentation, including System Security Plans (SSPs) and SSP Annexes (SSP-As).
• Assess security risks across Azure cloud environments, legacy systems, AI technologies, and other complex ICT platforms.
• Provide cyber security advice relating to system and application design.
• Present security risks, recommendations, and security artefacts to technical teams and senior executives.
• Collaborate with cross-functional teams to implement security controls and ensure compliance with Australian Government standards.
• Identify opportunities to strengthen the department's overall cyber security posture.
• Support issue resolution and provide guidance on security-related matters.

About You To be successful, you will bring:

• 3-5 years' experience conducting cyber security risk assessments within a Government environment.
• Demonstrated experience assessing Azure Cloud, legacy ICT systems, AI technologies, and complex enterprise environments.
• Strong knowledge of the Protective Security Policy Framework (PSPF), Information Security Manual (ISM), and Essential Eight.
• Experience engaging with both technical and non-technical stakeholders to communicate cyber security risks and recommendations.
• Excellent written and verbal communication skills, including preparing and delivering executive-level briefings.
• Sound understanding of networking infrastructure and associated security considerations.
• The ability to work independently, manage competing priorities, and deliver high-quality outcomes under pressure.
• Strong analytical, problem-solving, and stakeholder management skills.

Desirable Experience

• Understanding or experience working with Operational Technology (OT) environments.

Security Clearance Requirements

• Must be an Australian Citizen.
• Must be able to obtain and maintain a Negative Vetting Level 1 (NV1) Security Clearance.

Location & Working Arrangements

• 40 hours per week.
• Flexible location arrangements available across Australia.
• Successful candidates may work from alternative locations, provided they can attend the Canberra office when required or work from their nearest regional office in accordance with departmental attendance requirements.

Application Requirements Applicants must provide a one-page candidate pitch (maximum 5,000 characters) addressing all essential and desirable criteria.

Peoplebank and Leaders IT are committed to creating a diverse and inclusive workplace where everyone belongs. We welcome applications from people of all backgrounds, identities, and experiences. If you need adjustments to the recruitment process due to your circumstances, please let us know—we’re here to support you.