Lead Cyber Security Officer

IT Alliance Australia; Australia; On-site; AUD 120,000 - 150,000; Full time

Job summary

A technology consulting firm in Canberra seeks a Lead Cyber Security Specialist to guide security controls and risk management. The role involves conducting risk assessments, developing cybersecurity policies, and ensuring compliance with Australian Government standards. Ideal candidates should possess relevant certifications like CISSP and CCSP, as well as NV1 security clearance. Contract position for 12 months with potential extensions.

Qualifications

• Strong technical background with risk assessment qualifications such as CISSP or CCSP.
• Deep understanding of cyber threats specific to government.
• Minimum current active NV1 security clearance.

Responsibilities

• Conduct comprehensive risk assessments across IT systems.
• Develop and maintain cybersecurity policies, standards, and procedures.
• Monitor and report on the effectiveness of security controls.
• Prepare comprehensive reports for business and senior executives.

Skills

CISSP

CCSP

IRAP

ISO 27001

Cloud computing

Data protection knowledge

Tools

AWS

Azure

Kubernetes

Job description

Role

Lead Cyber Security Specialist - (EL1 Level)

Location: Canberra

Length of contract: 12 months

Contract extensions: 24 months extension (two extensions of twelve months each)

Security clearance: Must have Negative Vetting Level 1 security clearance

Job details

This role provides guidance on the application and operation of security controls, performing security risk and business impact analyses, and identifying risks from potential technical solution architectures. The role designs alternate solutions or countermeasures to mitigate identified risks and provide recommendations for appropriate security policies, standards, and guidelines. Managing risks related to the use, storage, and transmission of data, and carry out of risk management activities within specific functions or projects is also a part of this role. This includes identifying risks and vulnerabilities, assessing their impact and probability, developing mitigation strategies, and reporting these to the business. This role will ensure the protection and management of risks associated with information systems, contributing to a secure and compliant digital environment.

Ideal candidate: A strong technical background with relevant risk assessment qualifications such as the CISSP and/or CCSP, a deep understanding of cyber threats facing government, and the ability to work within a high-security environment. This is a mission-critical role where expertise will directly contribute to the protection of our global infrastructure.

Key duties and responsibilities

• Conduct comprehensive risk assessments across IT systems, applications, and third-party vendors.
• Evaluate and monitor compliance with Australian Government requirements such as the PSPF, ISM, and Essential Eight, and apply additional oversights from international frameworks such as ISO 27001, NIST, and GDPR.
• Develop and maintain cybersecurity policies, standards, and procedures.
• Perform gap analyses and recommend remediation strategies.
• Collaborate with internal stakeholders to ensure alignment with security governance objectives.
• Support audits and certification processes (e.g., IRAP assessments).
• Monitor and report on the effectiveness of security controls.
• Stay current with emerging threats, technologies, and regulatory changes.
• Prepare comprehensive reports for business and senior executives, translating complex technical findings into clear, actionable treatments and recommendations.

Technical skills and qualifications

• Highly desirable certifications include CISSP, CRISC, CCSP, or equivalent; ISO 27001 Lead Auditor, or IRAP are desirable, with other qualifications in government-specific cyber security programs considered highly.
• Experience authoring ICT system authorisation documentation including Security Risk Management Plans (SRMPs), System Security Plans (SSPs), and Standard Operating Procedures (SOPs).
• Experience in technical ICT areas such as system administration, software development, and cloud computing.
• In-depth knowledge of Australian Government cyber security standards, such as the PSPF and ISM.
• Familiarity with one or more: AWS, Azure, Kubernetes, Identity and Access Management.
• Minimum current active NV1 security clearance.
• Knowledge of emerging threats and international frameworks such as NIST, GDPR, and/or PCI DSS.
• Ability to communicate complex information to both technical and non-technical stakeholders.
• Understanding of data protection, privacy legislation, and compliance requirements.

Note: If you would be interested to apply, kindly share your updated CV on [e-mail]

Seniority level

• Mid-Senior level

Employment type

• Contract

Job function

• Information Technology

Industries

• Staffing and Recruiting
• Government Administration