Security Delivery Architect

Jobtailor; Canberra; On-site; AUD 140,000 - 190,000; Full time

Job summary

Jobtailor is seeking an experienced Security Architect to provide guidance across cloud, infrastructure, network, endpoint and identity platforms for Australian Government projects in Canberra.

You will translate business and regulatory requirements into practical technical outcomes, lead architecture reviews, perform risk assessments, and present findings to technical and executive stakeholders. Join a team delivering governance, workshops, and remediation plans throughout lifecycles.

Qualifications

• Demonstrated experience in security architecture, and cybersecurity consulting.
• Strong knowledge of ISM, PSPF and security assurance practices.
• Experience engaging with government clients and regulators.
• Ability to translate regulatory requirements into technical outcomes.

Responsibilities

• Provide security architecture guidance across cloud, infrastructure, network, endpoint, and identity platforms.
• Validate security requirements for new and existing solutions.
• Conduct design reviews to identify risks and control gaps.
• Develop and maintain architecture and security design documentation.
• Engage directly with Australian Government clients to facilitate security workshops, architecture reviews, and risk discussions.
• Translate business and regulatory requirements into practical and effective technical outcomes.
• Conduct security assessments, gap analyses, and cybersecurity maturity reviews.
• Present findings, recommendations, and remediation strategies to technical and executive stakeholders.
• Provide security oversight throughout project lifecycles, from requirements gathering through implementation and operational transition.
• Participate in governance forums, design authorities, and technical review boards to ensure solutions meet security, architecture, and contractual requirements.
• Support customer pursuits and pre-sales activities by providing cybersecurity subject matter expertise.
• Contribute to solution designs, statements of work (SOWs), and technical proposals.
• Participate in customer workshops and solution discussions.
• Identify opportunities for security uplift, advisory services, and managed security engagements.
• Conduct security risk assessments and maintain risk registers.
• Develop risk mitigation and treatment recommendations.
• Develop and maintain security standards, policies, procedures, and supporting documentation.
• Support audit, assurance, and accreditation activities aligned to the Information Security Manual (ISM), Essential Eight, and Protective Security Policy Framework (PSPF).
• Provide architecture guidance and control reviews aligned with ISM requirements.
• Support clients in preparing for IRAP assessments and accreditation activities.
• Develop security documentation, evidence packs, and compliance artefacts.
• Collaborate with assessors, project teams, and stakeholders to address and remediate assessment findings.
• Review vulnerability assessment and security reporting outputs.
• Support vulnerability prioritization and remediation activities.
• Assist Security Operations Centre (SOC), engineering, and client teams during security incidents.
• Contribute to incident reporting, investigation, and corrective action planning.

Skills

Security Architecture

Cybersecurity Consulting

GRC

ISM

PSPF

Cloud Platforms

Stakeholder Management

Regulatory Compliance

Job description

• Provide security architecture guidance across cloud, infrastructure, network, endpoint, and identity platforms.
• Validate security requirements for new and existing solutions.
• Conduct design reviews to identify risks and control gaps.
• Develop and maintain architecture and security design documentation.
• Engage directly with Australian Government clients to facilitate security workshops, architecture reviews, and risk discussions.
• Translate business and regulatory requirements into practical and effective technical outcomes.
• Conduct security assessments, gap analyses, and cybersecurity maturity reviews.
• Present findings, recommendations, and remediation strategies to technical and executive stakeholders.
• Provide security oversight throughout project lifecycles, from requirements gathering through implementation and operational transition.
• Participate in governance forums, design authorities, and technical review boards to ensure solutions meet security, architecture, and contractual requirements.
• Support customer pursuits and pre-sales activities by providing cybersecurity subject matter expertise.
• Contribute to solution designs, statements of work (SOWs), and technical proposals.
• Participate in customer workshops and solution discussions.
• Identify opportunities for security uplift, advisory services, and managed security engagements.
• Conduct security risk assessments and maintain risk registers.
• Develop risk mitigation and treatment recommendations.
• Develop and maintain security standards, policies, procedures, and supporting documentation.
• Support audit, assurance, and accreditation activities aligned to the Information Security Manual (ISM), Essential Eight, and Protective Security Policy Framework (PSPF).
• Provide architecture guidance and control reviews aligned with ISM requirements.
• Support clients in preparing for IRAP assessments and accreditation activities.
• Develop security documentation, evidence packs, and compliance artefacts.
• Collaborate with assessors, project teams, and stakeholders to address and remediate assessment findings.
• Review vulnerability assessment and security reporting outputs.
• Support vulnerability prioritization and remediation activities.
• Assist Security Operations Centre (SOC), engineering, and client teams during security incidents.
• Contribute to incident reporting, investigation, and corrective action planning.

Requirements

• Demonstrated experience in security architecture, cybersecurity consulting, security engineering, governance, risk and compliance (GRC), or security operations.
• Experience working within government, defence, or other highly regulated environments.
• Strong understanding of the Information Security Manual (ISM), Essential Eight, PSPF, and security assurance practices.
• Experience conducting security assessments, architecture reviews, and remediation planning activities.
• Experience supporting projects through design, implementation, and operational transition.
• Strong stakeholder management and communication skills across business, technical, and executive audiences.
• Practical knowledge of cloud platforms, infrastructure, networking, endpoint security, and identity technologies.

Core Competencies

Demonstrates expertise in security architecture and cybersecurity consulting, with a strong focus on governance, risk, and compliance in highly regulated environments. Proficient in conducting security assessments and developing risk mitigation strategies aligned with industry standards such as ISM and PSPF.

Highest-signal resume keywords

• Security Architecture
• Cybersecurity Consulting
• Governance, Risk And Compliance (GRC)
• Information Security Manual (ISM)
• Cloud Platforms

ATS Optimization Keywords

Hard Skills

• Security Assessments
• Architecture Reviews
• Risk Mitigation
• Vulnerability Assessment
• Security Design Documentation
• Remediation Planning
• Cybersecurity Maturity Reviews
• Security Standards Development
• Incident Reporting
• Compliance Artefacts

Soft Skills

• Stakeholder Management
• Communication Skills

Industry Keywords

• Essential Eight
• Protective Security Policy Framework (PSPF)
• Government
• Defence
• Highly Regulated Environments

Tools & Technologies

• Cloud Platforms
• Infrastructure
• Networking
• Endpoint Security
• Identity Technologies