Program Security Architect

randstad digital australia; City of Melbourne; Hybrid; AUD 90,000 - 130,000; Full time

Job summary

Randstad is seeking a Program Security Architect to lead security architecture across a major IT transformation program in a government setting. The role includes governance, assurance, and strategy across hybrid cloud and on-prem environments to ensure secure-by-design outcomes for large-scale initiatives.

You will collaborate with solution architects, vendors, and senior stakeholders to embed privacy, data protection, and security controls throughout the program lifecycle.

Qualifications

• Experience with cyber risk management and security controls.
• Proven expertise in PAM/PIM solutions (CyberArk/BeyondTrust).
• Hands-on SIEM/SOC operations and IPSEC knowledge.
• Vulnerability management and penetration testing experience.
• Identity management strategies and architectures.
• Extensive governance with Essentials 8, CIS, and VPDSS.
• Strong stakeholder engagement and communication.
• Analytical, structured and strategic thinking.

Responsibilities

• Strategic Architecture Leadership: Develop and govern the Program Security Architecture and target state models.
• Governance & Assurance: Establish security review mechanisms and ensure policy alignment.
• Technical Advisory: Translate security requirements into practical plans for engineering teams.
• Framework Alignment: Align with government requirements and industry best practices.
• Risk Management: Conduct risk assessments and recommend mitigations across hardware and software.
• Stakeholder Engagement: Influence executives and drive security-by-design across the program.

Job description

Program Security Architect – As part of a high-profile IT transformation program. Long term contract - Based in the South Eastern Suburbs We are seeking a highly experienced and strategic Program Security Architect to join a high-profile, mission-critical digital transformation program for a 12 months contract within the Government sector. In this pivotal role, you will provide critical security architecture leadership, governance, and assurance across complex technology initiatives. Your work will directly impact the security, resilience, and compliance of large-scale infrastructure, ensuring that high-stakes solutions are designed, built, and operated with a "secure-by-design" philosophy. You will navigate a hybrid cloud and on-premises environment, collaborating with solution architects, vendors, and senior business stakeholders to integrate robust security, privacy, and data protection requirements into every stage of the program lifecycle.

Key Responsibilities

• Strategic Architecture Leadership: Develop and govern the Program Security Architecture, including target state models, security design principles, and architectural decision records.
• Governance & Assurance: Establish security review mechanisms, perform threat-informed design reviews, and lead security design authority functions to ensure compliance with relevant policies and frameworks.
• Technical Advisory: Provide authoritative advice on security risks, controls, and trade-offs. Translate complex security requirements into practical implementation plans for engineering and infrastructure teams.
• Framework Alignment: Ensure architecture aligns with organizational standards, industry best practices, and government requirements (e.g., VPDSS, Essential 8, CIS).
• Risk Management: Conduct and maintain security risk assessments for hardware, software, and solution designs, recommending controls to mitigate identified threats.
• Stakeholder Engagement: Influence senior stakeholders and executive leadership to drive security-by-design principles and facilitate informed decision-making.

Requirements

• Technical Expertise:
  • Strong background in Cyber Frameworks, Cyber Controls, and Risk Management.
  • Expertise in PAM/PIM (e.g., CyberArk or BeyondTrust).
  • Experience with SIEM/SOC operations (IPSEC).
  • Vulnerability Management (e.g., Tenable) and general penetration testing experience.
  • Proven experience in Identity Management strategies and architectures.
• Governance & Compliance: Deep familiarity with enterprise governance and security standards such as Essential 8, CIS, and VPDSS.
• Architecture Capability: Demonstrated ability to develop reference architectures and integrate security architecture domains into complex programs of work.
• Soft Skills: Exceptional interpersonal, communication, and facilitation skills. You have the ability to influence senior executives, communicate technical decisions clearly, and navigate complex stakeholder landscapes.
• Analytical Rigor: A critical thinker with a self-driven, motivated approach, capable of managing competing priorities in a fast-paced environment.

At Randstad, we are passionate about providing equal employment opportunities and embracing diversity to the benefit of all. We actively encourage applications from any background.