Lead ICT Security Engineer

Whizdom; Canberra; On-site; AUD 130,000 - 170,000; Full time

Job summary

Whizdom is seeking a Lead ICT Security Engineer to deliver security outcomes across mission-critical ICT systems within a Canberra base. You will lead assurance activities to achieve Authority to Operate, develop security documentation, and provide trusted guidance to project teams and executives.

You will assess risks, translate complex requirements into practical controls, and engage stakeholders across government, Defence or intelligence environments. A Top Secret Vetting requirement applies.

Qualifications

• Experience leading security engineering across complex ICT systems.
• Strong knowledge of Authority to Operate accreditation processes.
• Ability to develop security documentation for approvals.
• Experience in security risk, threat assessments and vulnerability analysis.

Responsibilities

• Leading security engineering activities across complex ICT systems and projects.
• Managing assurance activities to achieve Authority to Operate accreditation.
• Developing System Security Plans and Concepts of Operations.
• Preparing security briefs and executive documentation.
• Reviewing systems against security controls and assurance requirements.
• Identifying vulnerabilities and documenting residual risks.
• Negotiating with ICT engineers, cyber security specialists and authorities.
• Translating complex security requirements into practical solutions.

Skills

Security engineering

Security accreditation

Risk assessments

Threat assessments

Stakeholder engagement

Technical communication

Security controls

Government ICT environments

Education

IRAP Assessor Training

CISSP

CISM

SABSA

ISSEP

Job description

About the Client

Our client is a high-profile Australian Government national security agency responsible for protecting Australia against global threats and supporting the nation’s strategic interests. Operating across intelligence, cyber security and highly specialised technical environments, the agency delivers mission-critical capabilities that contribute directly to Australia’s security.

This is an opportunity to join a highly skilled workforce delivering complex and meaningful ICT outcomes within one of Australia’s most secure operating environments.

About the Role

The Lead ICT Security Engineer will deliver security engineering outcomes across complex ICT systems and projects supporting mission-critical capabilities. Working under broad direction, you will provide specialist security expertise to ensure systems are securely designed, implemented and maintained in accordance with government security requirements.

A key focus of the role will be achieving and maintaining Authority to Operate accreditations. You will lead security assurance activities, conduct security risk and threat assessments, develop accreditation artefacts and provide trusted technical advice to project teams and senior stakeholders.

Key responsibilities will include:

• Leading security engineering activities across complex ICT systems and projects
• Managing security assurance activities required to achieve and maintain Authority to Operate accreditation
• Developing and maintaining System Security Plans, Concepts of Operations and supporting security documentation
• Preparing security briefs and executive documentation to support senior-level decisions and approvals
• Reviewing systems against relevant security controls, policies and assurance requirements
• Identifying vulnerabilities, developing mitigation strategies and documenting residual security risks
• Negotiating with ICT engineers, cyber security specialists, project teams and accreditation authorities
• Translating complex technical security requirements into practical, sustainable solutions
• Supporting the secure delivery and ongoing management of existing and emerging ICT capabilities

The Successful Candidate

The successful candidate will be an experienced security engineering professional with a strong background delivering security outcomes across complex government, Defence, intelligence or enterprise ICT environments.

You will bring a practical understanding of security accreditation processes, risk management and the implementation and assessment of security controls. You will also be a confident communicator who can influence stakeholders, explain complex technical concepts clearly and prepare high-quality documentation for both technical audiences and senior executives.

To be successful, you will demonstrate:

• Experience leading security engineering activities for complex ICT systems
• Strong knowledge of Authority to Operate accreditation and security assurance processes
• Experience conducting security risk assessments, threat assessments and vulnerability analysis
• The ability to develop System Security Plans, Concepts of Operations, risk assessments, security briefs and executive approval documentation
• Strong stakeholder engagement, negotiation and influencing skills
• The ability to communicate complex security concepts to technical and non-technical audiences
• Experience working within highly secure government, Defence or intelligence environments

Formal qualifications such as IRAP Assessor Training, CISSP, CISM, SABSA, ISSEP or equivalent would be highly regarded. Experience in security architecture, cloud security, DevSecOps or infrastructure accreditation would also be advantageous.

Candidates must also be willing to undergo an Organisational Suitability Assessment (OSA) prior to engagement.

Location:

The role is based in Canberra ACT.

Contract terms:

12 months from commencement date, plus 2x 12 month extensions

Experience Level:

Senior – EL1 Equivalent

Security Requirements:

Candidates must hold an active or reactivatable Top Secret Positive Vetting (TSPV) Security Clearance on submission. Our client is not prepared to upgrade an existing clearance for this position. An OSA (Organisational Suitability Assessment) will be required for this position.

Applications open until

8am 26 October 2026.