Security Architect

PATH4 Group; Brisbane; Hybrid; AUD 120,000 - 170,000; Full time

Job summary

PATH4 Group in Brisbane is seeking a Security Architect to define, govern and assure security across a major digital transformation programme, including an intelligence platform, case management, data platforms and Azure environments. The role requires leadership across cyber security, privacy, identity, information governance and assurance, ensuring secure-by-design solutions.

You will work with enterprise, solution and data architects, guiding security across the solution lifecycle—from design

Qualifications

• Experience in security architecture and governance for large-scale cloud/digital programs.
• Lead design reviews, threat modelling and risk assessments across the lifecycle.
• Translate security and compliance obligations into practical controls and delivery outcomes.

Responsibilities

• Lead security architecture across the programme and embed security, privacy and governance requirements in solution designs.
• Develop security principles, standards and reference architectures.
• Guide design reviews, threat modelling, risk assessments and assurance.
• Govern controls for identity, access, information protection, monitoring and incident response.
• Lead accreditation, compliance and audit-readiness activities, and advise stakeholders on secure design.

Skills

Security architecture

Cloud security

Threat modelling

Risk assessments

Identity & access management

Education

Degree in computer science or related field

Tools

Azure

Microsoft 365

Microsoft Entra ID

Microsoft Defender

Purview

Job description

About the organisation

Our client is a public-sector organisation delivering protective and safeguarding services. Its work includes bringing together screening, reporting, and child-safe functions to support safer outcomes for the community. The organisation is investing in digital capability to support its services, including secure information sharing and effective case management. Its work is guided by a commitment to public service, inclusion and respect for diverse perspectives.

About the role

As Security Architect, you will define, govern and assure security architecture across a major digital transformation programme. The work includes an intelligence platform, a case management solution, integration services, data and analytics platforms, Microsoft 365 services and supporting Azure environments. You will provide specialist leadership across cyber security, privacy, identity, information governance and assurance, ensuring solutions are secure by design and aligned with applicable public-sector policies, standards and legal obligations. Working closely with enterprise, solution and data architects, you will guide security throughout the solution lifecycle—from design reviews and risk assessments to accreditation and audit readiness. You will also provide technical leadership to delivery and support teams. This is a contract opportunity based in Brisbane with hybrid working.

Key responsibilities

• Lead security architecture across the programme and embed security, privacy and governance requirements in solution designs.
• Develop security principles, standards and reference architectures.
• Guide design reviews, threat modelling, risk assessments and assurance.
• Govern controls for identity, access, information protection, monitoring and incident response.
• Lead accreditation, compliance and audit-readiness activities, and advise stakeholders on secure solution design.

Key experience required

• Experience in security architecture, cyber security, enterprise architecture or a related technology leadership role in a complex organisation.
• A track record of delivering security architecture and governance for large-scale cloud, digital transformation, data or integration programmes.
• Experience leading security design reviews, threat modelling, risk assessments and assurance activities across a solution lifecycle.
• Experience translating security, privacy and compliance obligations into practical controls and delivery outcomes, and working effectively with executives, technical teams, operational stakeholders and vendors.
• Experience in government or another highly regulated environment is valued. [Suggestion: experience balancing security requirements with operational needs and programme delivery objectives.]

Key technical skills required

• Security architecture for cloud and enterprise environments, including Azure, Microsoft 365, Dynamics 365, Power Platform, integration services and data platforms.
• Azure security services, networking controls and cloud-native security; Microsoft Entra ID and identity and access management, including privileged access.
• Microsoft Defender, Microsoft Purview, information protection, encryption, security monitoring, logging, auditing and incident response.
• Zero Trust and identity-centric security principles.
• Information classification, privacy-by-design, privacy impact assessments, information sharing, records management and data retention.
• Security risk assessment, threat modelling, control mapping and assurance, including practical knowledge of IRAP, the ASD Essential Eight and ISO 27001.
• Understanding of public-sector information security frameworks and associated governance obligations.

Desirable skills

• A degree in computer science, software engineering or a related discipline, or equivalent experience.
• Industry certifications such as CISSP, CCSP, SABSA, Azure Security Engineer, Azure Solutions Architect or ISO 27001 Lead Implementer.
• Familiarity with public-sector security and privacy requirements, including relevant information security frameworks and privacy principles.
• Experience in regulatory, law enforcement, justice, health or another highly regulated environment.
• [Suggestion: experience facilitating security workshops and presenting technical risks and recommendations to both technical and non-technical audiences.]