Lead Cyber Risk Assessor

Resolve Recruit Inc.; City of Melbourne; On-site; AUD 120,000 - 170,000; Full time

Job summary

Resolve Recruit is partnering with a leading Commonwealth Government agency to recruit a Lead Cyber Risk Assessor. The role focuses on conducting security risk assessments of ICT systems and applications in line with PSPF and ISM, and developing key security documentation while liaising with technical and non-technical stakeholders.

The position requires 3–5 years of government experience, strong communication, and a solid grasp of networking; flexible work arrangements are available within a

Qualifications

• 3–5 years' experience conducting security risk assessments in a government/cyber team.
• Strong written and verbal communication skills, with executive briefing experience.
• Understanding of networking infrastructure and security controls.

Responsibilities

• Conduct security risk assessments of ICT systems and applications per PSPF/ISM.
• Review SSP-As and SSPs, contributing to security documentation.
• Provide guidance on designs to meet PSPF/ISM/Essential Eight requirements.
• Liaise with stakeholders to communicate risks and recommendations.
• Deliver executive-level briefings and security artefacts to senior audiences.
• Collaborate with cross-functional teams to implement security solutions and ensure standards compliance.

Skills

Security risk assessments

Communication skills

Networking fundamentals

Azure Cloud security

Risk governance

Tools

PSPF

ISM

Essential Eight

Job description

• 12 + 12 + 12-month contract with a key Commonwealth Government agency
• Negative Vetting 1 Security Clearance Required
• Strengthen the security posture of nationally significant ICT systems
• Flexible work arrangements with a major Commonwealth agency

Are you an experienced cyber security professional looking to take the next step in a high-impact Lead Cyber Risk Assessor role within the Commonwealth government?

Resolve Recruit is partnering with a leading Commonwealth Government agency to find a highly skilled Lead Cyber Assessor. Our client operates a fast-paced, high-performing ICT cyber security team responsible for protecting critical systems and applications relied upon by the Australian community. In this role, you will conduct security risk assessments in line with the Protective Security Policy Framework (PSPF) and Information Security Manual (ISM), and contribute to the development of key security documentation, while liaising with both technical and non-technical stakeholders to strengthen the organisation's overall security posture.

Key Responsibilities

• Conduct security risk assessments of ICT systems and applications in accordance with the PSPF and ISM.
• Review and contribute to the development of security documentation, including System Security Plan Annexes (SSP-As) and System Security Plans (SSPs).
• Provide guidance on application and system designs relating to PSPF, ISM and Essential Eight requirements.
• Liaise with technical and non-technical stakeholders on cyber security issues, system risks and recommendations.
• Prepare and deliver executive-level briefings and present security artefacts confidently to senior audiences.
• Collaborate with cross-functional teams to implement security solutions and ensure compliance with Australian government standards and frameworks.

Experience & Skills

• 3-5 years' experience working within Government conducting security risk assessments in a cyber team.
• Demonstrated experience conducting security risk assessments across Azure Cloud, legacy ICT systems, AI technology and complex systems.
• Current knowledge of PSPF, ISM and Essential Eight, with experience providing related guidance.
• Strong written and verbal communication skills, including experience preparing and presenting executive-level briefings.
• Demonstrated understanding of networking infrastructure.
• Sound judgement and the ability to manage a large workload and work under pressure with limited supervision.