Lead Cyber Analysts

DFP Recruitment; Sydney; On-site; AUD 90,000 - 130,000; Full time

Job summary

DFP Recruitment is recruiting for multiple ICT cyber security specialists to join a fast-paced government team in Sydney. You will perform security risk assessments in line with PSPF, ISM and Essential Eight, ensuring precision and clear documentation.

Responsibilities include reviewing SSP-As/SSPs, liaising with technical and non-technical stakeholders, and delivering executive-level briefings. This role offers a pathway to contribute to Australia’s security posture.

Qualifications

• 3-5 years’ experience conducting security risk assessments in government environments.
• Experience with PSPF, ISM, and Essential Eight guidance.
• Ability to communicate risk findings to executive audiences.
• Experience liaising with both technical and non-technical stakeholders.
• Strong written and verbal communication skills.
• Understanding of networking infrastructure.

Responsibilities

• Conduct security risk assessments of ICT systems and applications.
• Review and contribute to SSP-As and SSPs.
• Collaborate with cross-functional teams to implement security controls.
• Present security artifacts to senior stakeholders.
• Provide guidance to strengthen security posture.

Skills

Security risk assessments

Azure Cloud

Legacy ICT systems

AI Technology

Stakeholder communication

Job description

DAFF are seeking multiple highly skilled technical resources to join our high-performing and fast paced ICT cyber security team.

The resource should be proficient in conducting security risk assessments of ICT systems and applications in accordance with the Protective Security Policy Framework (PSPF) and the Information Security Manual (ISM), with a strong focus on accuracy and attention to detail. The resource will review and contribute to the development of the full suite of security documentation, including System Security Plan Annexes (SSP-As) and System Security Plans (SSPs).

• 3-5 years’ experience working within Government conducting security risk assessments in a cyber team.
• Demonstrated experience in conducting security risk assessments with Azure Cloud, Legacy ICT systems, AI Technology and complex systems.
• Current knowledge and experience providing guidance on application and system designs relating to PSPF, ISM and Essential Eight.
• Experience in liaising with non-technical and technical stakeholders in relation to cyber security issues, system risks and recommendations.
• Demonstrated strong written and verbal communication skills, including experience preparing and delivering executive-level briefings. Assist in identifying opportunities to strengthen the security posture of the department’s environment.
• Strong understanding of networking infrastructure.
• Understanding of Operational Technologies will be an advantage.

Key duties and responsibilities

• Skills and capability
• Ability to troubleshoot and resolve complex issues.
• Has sound judgement and the ability to work under pressure with limited supervision to produce high-quality outcomes.
• Ability to manage a large workload.
• Ability to develop strong productive relationship, communication skills and issue resolution.
• Strong written ability is required to be able to explain complex systems to a non-technical audience.
• Strong communication skills to present security artifacts to a senior audience confidently.
• Collaborate with cross-functional teams to implement security solutions and ensure compliance with Australian government standards and frameworks.

Criteria

Essential criteria

1. 3-5 years’ experience working within Government conducting security risk assessments in a cyber team.
2. Demonstrated experience in conducting security risk assessments with Azure Cloud, Legacy ICT systems, AI Technology and complex systems.
3. Current knowledge and experience providing guidance on application and system designs relating to PSPF, ISM and Essential Eight
4. Experience in liaising with non-technical and technical stakeholders in relation to cyber security issues, system risks and recommendations.
5. Strong written and verbal communication skills, including experience preparing and presenting executive-level briefings.
6. Demonstrated understanding of networking infrastructure.

Desirable criteria

• Understanding of Operational Technologies will be an advantage.

DFP welcomes applications from Aboriginal and Torres Strait Islander people, people with diverse cultural and linguistic backgrounds and people with disability. In addition, DFP will provide reasonable adjustments for individuals with disability throughout the recruitment process. If you identify as a person with disability and require adjustments to the application, recruitment, selection and/or assessment process, please advise [e-mail]1300 337 000and indicate your preferred method of communication (email, phone, text) so we can keep in touch and meet your accessibility needs.