Security Assurance Lead - 12-Month Hybrid (Brisbane CBD)

Cyber StrategiX; Brisbane; Hybrid; AUD 120,000 - 160,000; Full time

Benefits offered by this job

Health insurance

Job summary

Cyber StrategiX is seeking a Cyber Security Consultant to build and own the security assurance process within a Brisbane-based, hybrid role. The candidate will align systems with the Australian Government ISM and NIST CSF 2.0, ensuring evidence-based control implementation and risk assessments.

The role collaborates with GRC, architecture and approvals teams in a well-governed environment, focusing on governance, risk management and stakeholder communication.

Qualifications

• Substantial experience in cyber security governance, risk and compliance.
• Experience implementing and embedding a security control or assurance framework.
• Experience in security assessment and authorisation using ISM RMF or NIST RMF or equivalent.
• Sound judgement interpreting control requirements in organisational context.
• Strong stakeholder engagement and written communication skills.

Responsibilities

• Design and implement a security assurance system and own its operation.
• Assess systems against ISM and NIST CSF 2.0, collecting evidence of controls.
• Conduct technical security risk assessments or refer to GRC.
• Provide oversight of assessment work by security analysts and ensure quality.
• Offer security guidance to project and technology stakeholders.
• Engage with GRC and approvals to support informed decisions.

Skills

Governance & compliance

Security controls & assurance

Security assessment & RMF/ISM

Stakeholder engagement

Written communication

Job description

Cyber StrategiX is seeking a Cyber Security Consultant to build and own the security assurance process within a Brisbane-based, hybrid role. The candidate will align systems with the Australian Government ISM and NIST CSF 2.0, ensuring evidence-based control implementation and risk assessments.

The role collaborates with GRC, architecture and approvals teams in a well-governed environment, focusing on governance, risk management and stakeholder communication.