NV2 Cyber Security Consultant - Threat & Risk Advisor

Rubix Solutions; Canberra; On-site; AUD 150,000 - 190,000; Full time

Job summary

Rubix Solutions, partnering with a leading defence prime, is seeking an NV2 cleared Cyber Security Consultant to support customers across Defence, government and secure environments. You will assess cyber exposure, evaluate control effectiveness and advise on risk management across ICT and OT systems.

You will translate technical findings into practical recommendations and work with stakeholders to improve security outcomes.

Qualifications

• Experience in cyber security consulting, security assurance, governance or risk assessment.
• Ability to assess security controls and translate findings into actions.
• Familiarity with ISM, ISO 27001 and the NIST Cybersecurity Framework.
• Strong report writing skills and the ability to explain issues, impacts and treatments.

Responsibilities

• Conduct security threat and risk assessments across ICT and OT systems.
• Assess systems against security frameworks and identify gaps.
• Analyse threats, threat actors and vulnerabilities in client operations.
• Produce risk assessments and reports with findings and recommended improvements.
• Review the effectiveness of existing controls and propose treatments.
• Develop security policies, procedures and governance plans.
• Gather evidence through documents, questionnaires, stakeholder interviews and workshops.
• Explain technical and business risks to stakeholders with varying security knowledge.
• Research security technologies and contribute to customer solutions.
• Collaborate with colleagues across Australia and overseas to share expertise.

Job description

Rubix Solutions, partnering with a leading defence prime, is seeking an NV2 cleared Cyber Security Consultant to support customers across Defence, government and secure environments. You will assess cyber exposure, evaluate control effectiveness and advise on risk management across ICT and OT systems.

You will translate technical findings into practical recommendations and work with stakeholders to improve security outcomes.