Lead Cyber Security Adviser – Governance, Risk & Compliance

Babylon Data Pty Ltd; Canberra; Hybrid; AUD 186,000 - 214,000; Full time

Job summary

Babylon Data Pty Ltd seeks experienced Lead Cyber Security Advisers for government-facing contract opportunities. You will lead risk assessments, strengthen policies, and guide remediation across complex ICT environments, translating technical risk into clear business decisions.

You will engage executives and technical teams to embed security requirements into delivery, ensuring measurable uplift and compliance with government standards. A rigorous, collaborative approach is essential.

Qualifications

• Evidence of delivering cyber security uplift, resilience, remediation or compliance initiatives in large, complex ICT environments.
• Strong governance, risk management, assurance and compliance experience.
• Demonstrated application of PSPF, ISM and Essential Eight; knowledge of NIST and related frameworks.
• Experience assessing risks and recommending actionable mitigation and remediation.
• Ability to influence and collaborate with senior executives and technical teams.

Responsibilities

• Lead cyber security risk assessments and assurance activities across systems, apps, and processes.
• Develop and maintain information security policies, standards, and procedures.
• Assess designs and controls, identify weaknesses and suggest mitigations.
• Review third‑party software against security requirements and audits.
• Engage stakeholders to embed security into delivery and operations.
• Mentor and lead security teams to improve delivery outcomes.

Skills

Cyber governance

Risk management

Assurance

Compliance

Policy development

Stakeholder engagement

EL1 leadership

Tools

ISM

Essential Eight

NIST

Job description

Rate guide: $135–$155 per hour including superannuation

Location: Canberra, Brisbane, Melbourne, Sydney or Adelaide

Initial contract: Up to 12 months

Extensions: Potential extensions totalling up to a further 24 months

Expected start: 1 February 2027

Security clearance: Current active NV1 or higher

Working arrangements: First six weeks onsite. Hybrid arrangements may then be considered, with a minimum of three days per week onsite. Applicants must reside within reasonable commuting distance of their nominated office.

Maximum hours: RFQ lists 80 hours per week; ordinary working hours and the stated maximum are subject to confirmation.

Overview

Babylon Data is seeking experienced Lead Cyber Security Advisers for multiple contract opportunities supporting a major Australian Government agency.

These roles combine cyber security governance, risk and compliance with practical security advice across complex enterprise ICT environments. You will lead risk assessments, strengthen security policies and controls, guide remediation activities and help stakeholders apply government security requirements.

We are looking for advisers who can translate technical risks into clear business decisions and demonstrate measurable outcomes from cyber security uplift, assurance or compliance initiatives.

Key responsibilities

• Lead cyber security risk assessments, business impact analysis and assurance activities across systems, applications, websites, tools and business processes.
• Develop and maintain information security policies, standards, guidelines and procedures.
• Assess system designs and security controls, identify weaknesses and recommend practical mitigations.
• Review third-party software and vendors against organisational security requirements.
• Support internal and external audits through compliance monitoring, evidence preparation and remediation tracking.
• Advise on security capabilities and controls across networks, endpoints, applications and ICT products.
• Support system accreditation, System Security Plans and security assessment activities.
• Engage executives, technical teams, business stakeholders and external providers to embed security requirements into delivery and operations.
• Resolve or escalate complex and sensitive cyber security matters.
• Lead team priorities, resources, performance and workflows, while supporting mentoring and knowledge transfer.

Essential experience and requirements

• Demonstrated delivery of cyber security uplift, resilience, remediation or compliance initiatives within large, complex ICT environments, preferably Australian Government or other regulated environments.
• Strong practical experience in cyber security governance, risk management, assurance and compliance.
• Demonstrated application of the Protective Security Policy Framework, Information Security Manual and Essential Eight, supported by knowledge of NIST and other relevant security and risk frameworks.
• Experience assessing security risks and controls and developing actionable mitigation and remediation advice.
• Familiarity with network, endpoint and application security controls.
• Understanding of system accreditation, System Security Plans and security assessment processes.
• Proven ability to influence and collaborate with senior executives, technical specialists, business representatives and external providers.
• Ability to communicate complex cyber security concepts clearly to technical and non-technical audiences.
• Leadership capability consistent with an EL1-equivalent role, including managing priorities, team performance and delivery outcomes.
• A current active NV1 security clearance or higher, which must be maintained throughout the engagement.
• Cyber security or ICT uplift delivery within Services Australia or another Australian Government agency.
• Enterprise experience spanning cloud platforms, identity and access management, security operations, infrastructure, applications and data services.
• Delivery within tight timeframes while managing competing priorities, dependencies and stakeholder expectations.
• Demonstrated mentoring, collaboration and knowledge transfer.