Lead IT Security Advisor

IT Alliance Australia; Canberra; Hybrid; AUD 120,000 - 160,000; Full time

Job summary

A Federal Government client is seeking a Lead IT Security Advisor - EL1 for a fulltime role in Canberra, focusing on advisory and assurance within a complex ICT environment. The position requires extensive knowledge of cyber security requirements and risk management, particularly in cloud-based contexts. The advisor will collaborate with internal teams and external providers to ensure secure design and effective assurance. The role allows for hybrid work, with a strong emphasis on continuous improvement and governance.

Qualifications

• Comprehensive knowledge of Australian Government cyber security requirements, including the ISM and PSPF.
• Strong experience in cyber security risk management, including NIST, ISO 31000 and ISO 27005.
• Demonstrated experience providing senior IT security advisory services in cloud-based ICT environments.

Responsibilities

• Providing continuous, independent cyber security advice across Agency platforms.
• Supporting the uplift of cyber security maturity and continuous improvement activities.
• Advising on cyber security risk management and executive level risk acceptance.

Skills

Cyber security risk management

Advisory services

Communication skills

Job description

One of our Federal Government Clients is seeking to engage a Lead IT Security Advisor - EL1

Applicable for Federal Government.

Job Details

• Contract Duration: 03 Years (12 Months initially + 24 Months extension)
• Work Location: Canberra (Hybrid – 03 Days Office / 02 Days home each week)
• Eligibility: You must need to have Baseline Security Clearance or above.
• Tentative Start Date: 1st May 2026

Role Description

The role is advisory and assurance focused and does not include responsibility for the operational execution of cyber security controls, security operations, or SOC functions. Fulltime access to senior advisory capability is critical to maintaining continuity of judgement and effective oversight within a complex, cloud based and vendor delivered ICT environment.

The IT Security Advisor will work closely with internal cyber security personnel, platform owners, delivery teams, and external service providers to support secure design, informed decision making, and effective assurance.

Key duties and responsibilities

• Providing continuous, independent cyber security advice across Agency platforms, systems, and services, with a focus on cloud based and outsourced environments.
• Supporting the uplift and sustainment of cyber security maturity, including Essential Eight implementation, Zero Trust principles, and continuous improvement activities.
• Advising on cyber security risk management, including risk identification, assessment, treatment, residual risk, and executive level risk acceptance and decision making.
• Providing oversight and assurance of security controls implemented by internal teams and external service providers, including review and interpretation of security assessments, audits, third party assurance artefacts, and inputs supporting continuous assurance and ATO aligned decision making.
• Supporting the development and maintenance of cyber security policies, standards, plans, and guidance that enable delivery teams and vendors to meet Agency security requirements.
• Providing advisory support across the Agency on secure design and architecture, control selection, shared responsibility models, incident preparedness and post incident improvement, and cyber security awareness and capability uplift.

Qualifications/Experience

• Comprehensive knowledge of Australian Government cyber security requirements, including the ISM and PSPF.
• Strong experience in cyber security risk management, including but not limited to NIST, ISO 31000 and ISO 27005.
• Understanding of ISO 27001aligned ISMS concepts as they relate to control selection, assurance, and risk-based decision making (not certification ownership).
• Demonstrated experience providing senior IT security advisory services in cloud based and outsourced ICT environments.
• Experience supporting cyber security maturity uplift, including Essential Eight implementation and sustainment.
• Experience providing assurance and advisory services across vendor delivered and managed security services, with strong communication skills to engage effectively with technical specialists, senior executives, and governance committees.

Engagement Model and Performance

• The IT Security Advisor will be engaged on a fulltime basis to provide continuity of expertise and sustained advisory support. The role may be delivered through a mix of onsite and remote engagement, subject to Agency requirements.
• Performance will be measured against the effective delivery of advisory, enablement, and assurance outcomes, with regular performance and priority setting discussions held with the Chief Information Security Officer.