Program Security Architect

triniti; City of Melbourne; Hybrid; AUD 180,000 - 260,000; Full time

Job summary

triniti is seeking a Program Security Architect to drive a major cyber security uplift for critical infrastructure in a multi-year program. The role is embedded in a senior team delivering secure-by-design architectures for IT and OT environments, aligned to AESCSF and ASD Fortify guidance.

You will partner with senior stakeholders, delivery partners, and vendors to ensure solutions meet security requirements and deliver real operational outcomes across the enterprise.

Qualifications

• Senior-level security architect with experience in complex regulated environments.
• Experience in critical infrastructure, energy, or utilities sectors preferred.
• Knowledge of IT and OT/ICS/IoT security, IT/OT convergence, and SOCI obligations.

Responsibilities

• Lead creation, review, and approval of secure solution architectures for new cyber security initiatives.
• Provide architectural leadership, direction, and governance across cyber security programs.
• Ensure designs incorporate security controls in line with policies, standards, and industry best practices.
• Collaborate with business stakeholders to translate requirements into secure designs and roadmaps.
• Act as technical liaison between business teams, delivery partners, and vendors to ensure secure outcomes.
• Review vendor designs to ensure alignment with security principles and target-state requirements.
• Support delivery of strategic cyber security initiatives including CI-Fortify and AESCSF alignment.

Skills

Enterprise security architecture

Solution design

Identity and access management

Cloud security (Azure)

IT/OT security

Security governance

Job description

Program Security Architect - Critical Infrastructure Cyber Uplift

12 month contract

Hybrid (3 days per week in Melbourne office)

We're looking for a Program Security Architect to play a key role in a major multi-year cyber security uplift program protecting critical energy infrastructure.

This is a senior architecture role embedded in a five-year program focused on lifting cyber maturity across both IT and OT environments, aligning to the Australian Energy Sector Cyber Security Framework (AESCSF) and the ASD's CI Fortify guidance, and strengthening the resilience of systems communities rely on every day.

You'll work across security architecture, identity and remote access, cloud and OT/IoT security, partnering with senior stakeholders, delivery partners and vendors to make sure solutions are secure by design and deliver real operational outcomes.

Key responsibilities:

• Lead the creation, review, and approval of secure solution architectures for new cyber security initiatives, ensuring alignment with business objectives, technology strategy, and security requirements.
• Provide architectural leadership, strategic direction, and governance oversight across cyber security programs and uplift initiatives.
• Ensure technology solutions, products, and services are designed and implemented with appropriate security controls in alignment with cyber security policies, standards, regulatory obligations, and industry best practices.
• Partner with business stakeholders to translate business requirements into secure and scalable technology designs and implementation roadmaps.
• Act as the primary technical liaison between business teams, delivery partners, and vendors to ensure solution designs meet security, operational, and business outcomes.
• Review, challenge, and assess vendor and partner technical proposals to ensure alignment with cyber security architecture principles, standards, and target-state requirements.
• Provide specialist Cyber Security Architecture expertise across the Cyber Security Program.
• Support the successful delivery of strategic cyber security initiatives, including CI-Fortify, Remote Access Uplift, AESCSF v2 SP2 alignment, and other IT/OT security improvement programs.
• Ensure security risks, architectural considerations, and compliance requirements are effectively addressed throughout project and program lifecycles.
• Contribute to the continuous improvement of cyber security capabilities, reference architectures, design patterns, standards, and security controls.
• Collaborate as a member of the Security Architecture team, providing subject matter expertise and partnering with technology, operational, and business stakeholders to achieve secure and resilient outcomes across the organisation.
• Promote security-by-design principles and ensure cyber security requirements are embedded into enterprise, solution, cloud, and operational technology architectures.

About you

You’ll be an experienced Security Architect with a strong background in complex, regulated environments and large-scale cyber security programs.

We're particularly interested in people who have experience across:

• Enterprise and solution-level cyber security architecture and design.
• Critical infrastructure, energy or utilities environments.
• IT and OT/ICS/IoT security, including IT/OT convergence.
• Security of Critical Infrastructure (SOCI) obligations and critical infrastructure risk management.
• Identity and access management, secure remote access and network segmentation.
• Cloud security architecture (Azure and hybrid environments).
• Reviewing and challenging vendor and partner designs and proposals.
• Architecture governance, design authority and security assurance.
• Working within large programs alongside delivery partners and vendors.
• Managing senior stakeholders and translating business needs into secure designs.