Lead Cyber Security Risk Assessor – Government (Azure/ISM)

seek.com.au; Canberra; On-site; AUD 120,000 - 180,000; Full time

Job summary

Government is seeking a Lead Cyber Security Analyst to conduct hands-on risk assessments across ICT systems, Azure cloud and emerging technologies. You will identify risks, document findings, and provide actionable treatment plans while aligning with PSPF, ISM and Essential Eight controls.

You will prepare System Security Plans and annexes, engage with risk owners and executives, and help senior stakeholders understand and reduce security risks in a fast-paced government environment.

Qualifications

• At least 3–5 years' experience in government cyber security and risk assessments.
• Hands-on experience assessing Azure cloud, legacy ICT and complex systems.
• Knowledge of PSPF, ISM and Essential Eight is required.
• Experience preparing System Security Plans and related documentation.
• Ability to identify, analyse and communicate security risks and recommendations.

Responsibilities

• Conduct detailed security risk assessments of ICT systems and applications.
• Assess Azure cloud environments, legacy ICT systems, AI technologies and other complex systems.
• Identify risks, control gaps and compliance issues; develop treatment recommendations.
• Review designs against PSPF, ISM and Essential Eight.
• Prepare and maintain risk assessments, SSPs and annexes with artefacts.
• Document findings clearly and present to senior stakeholders.
• Explain cyber risks to technical and non-technical audiences.
• Collaborate across teams to implement security solutions and improve posture.
• Manage multiple assessments and competing priorities in a fast-paced environment.

Skills

Security risk assessment

Azure cloud

Stakeholder communication

Networking infrastructure

Documentation

Job description

Government is seeking a Lead Cyber Security Analyst to conduct hands-on risk assessments across ICT systems, Azure cloud and emerging technologies. You will identify risks, document findings, and provide actionable treatment plans while aligning with PSPF, ISM and Essential Eight controls.

You will prepare System Security Plans and annexes, engage with risk owners and executives, and help senior stakeholders understand and reduce security risks in a fast-paced government environment.