Lead Cyber Risk Analyst – Government ICT & Azure

Harrison McMillan; Australia; Hybrid; AUD 120,000 - 180,000; Full time

Job summary

Harrison McMillan is seeking an experienced Lead Cyber Analyst to join a high-performing cyber security team and conduct security risk assessments across complex ICT environments. The role is a long-term 12-month contract with two 12-month extension options, based in Australia with hybrid working arrangements across ACT, NSW, VIC and beyond.

A Negative Vetting Level 1 security clearance is required. You will engage with technical and non-technical stakeholders, review SSPs/SSP-As, and provide

Qualifications

• 3–5 years' experience conducting security risk assessments within government cyber security teams.
• Experience assessing Azure Cloud, legacy ICT, AI technologies and complex environments.
• Knowledge of PSPF, ISM and Essential Eight requirements.
• Ability to communicate risks to technical and non-technical stakeholders.

Responsibilities

• Conduct security risk assessments for ICT systems and applications
• Review and contribute to System Security Plans (SSPs) and SSP annexes
• Provide cyber security advice aligned with PSPF, ISM and Essential Eight requirements
• Assess Azure cloud, legacy ICT, AI technologies and complex enterprise environments
• Engage with technical and non-technical stakeholders to communicate risks and recommendations
• Support initiatives that strengthen organisational cyber security posture
• Present security findings and artefacts to senior stakeholders and executive audiences

Skills

Security risk assessments

Azure Cloud

PSPF/ISM/Essential Eight

Stakeholder communication

Networking knowledge

Job description

Harrison McMillan is seeking an experienced Lead Cyber Analyst to join a high-performing cyber security team and conduct security risk assessments across complex ICT environments. The role is a long-term 12-month contract with two 12-month extension options, based in Australia with hybrid working arrangements across ACT, NSW, VIC and beyond.

A Negative Vetting Level 1 security clearance is required. You will engage with technical and non-technical stakeholders, review SSPs/SSP-As, and provide