Senior Cyber Compliance & Assurance Specialist

Airservices Australia; Canberra; On-site; AUD 110,000 - 150,000; Full time

Job summary

Airservices Australia is seeking a Senior Cyber Compliance & Assurance Specialist to join the Cyber Design & Assurance Lead within the Technology Strategy, Assurance & Cyber team.

You will lead governance, risk and compliance activities across IT, OT, cloud and critical infrastructure, and support audits, risk assessments and regulator readiness.

This role requires experience with ISM/PSPF/SOCI, IRAP processes, and GRC platforms; Australian citizenship and NV1 clearance may be required.

Qualifications

• Significant experience in cyber security governance, risk management, compliance and assurance within complex environments.
• Experience leading audit activities, remediation programs and compliance improvements.
• Familiarity with ISO 27001, NIST CSF, SOCI Act, Privacy Act, CIS Controls and IRAP processes.
• Strong knowledge of Australian Government security frameworks (ISM, PSPF, Essential Eight).
• Experience with GRC platforms such as ServiceNow IRM/GRC, Archer or MetricStream.

Responsibilities

• Lead and support cyber security governance, risk management, compliance and assurance activities across IT, OT, cloud and critical infrastructure environments.
• Conduct and oversee security assurance activities to support system accreditation and Authorisation to Operate (ATO).
• Lead cyber security risk assessments and compliance reviews for new and existing systems, projects and services.
• Develop, maintain and monitor cyber security risk registers and treatment plans.
• Review vendor security documentation for contractual and regulatory compliance.
• Plan, coordinate and participate in audits, IRAP activities and regulatory reviews; manage findings and remediation actions.
• Monitor compliance with ISM, PSPF, SOCI, Privacy Act and aviation obligations.
• Provide guidance on preventative, detective and corrective controls and assess their effectiveness.
• Support evaluation and operation of GRC platforms for risk management and reporting.

Skills

Cyber governance

Risk management

Compliance

Security assurance

Communication (written & verbal)

Education

CRISC

CISSP

CISM

IRAP Assessor

ISO 27001 Lead Auditor

Tools

ServiceNow IRM/GRC

Archer

MetricStream

Job description

Senior Cyber Compliance & Assurance Specialist

• Airservices Australia is seeking a dynamic cyber security professional to join the Cyber Design & Assurance Lead to join our Technology Strategy, Assurance & Cyber team.


• Full Time Permanent position


• ACT or Brisbane location

The Organisation

Airservices Australia is a government-owned organisation responsible for the safe and efficient management of 11% of the world’s airspace and provision of aviation rescue fire fighting services at Australia’s busiest airports.

Our people are our greatest asset with a dynamic and diverse team operating from locations across the country - from bustling cities to regional and remote locations, including an island. This team keep are helping to secure the future of Australia’s skies and keep it amongst the safest in the world.

We connect people with their world safely – linking family and friends, generating economic activity, creating jobs, and facilitating trade and tourism.

Airservices is committed to fostering a culture that is diverse, inclusive, and respectful. We encourage motivated individuals who love what they do, value a service first mindset and embrace a challenge to explore a career with Airservices. In return you will be a valued team member, be offered flexibility and experience a meaningful career in an exciting, ever-evolving aviation industry.

Senior Cyber Compliance & Assurance Specialist

Are you ready to be on the frontline of cyber defence in Australia’s most critical aviation infrastructure organisation

Airservices Australia is seeking a dynamic cyber security professional to join the Cyber Design & Assurance Leadto join ourTechnology Strategy, Assurance & Cyberteam.

This role is responsible for supporting the delivery of enterprise-wide security governance, including the secure by design process, engagement with commercial delivery partners and supporting cyber design and assurance outcomes.

About the Role

As a Cyber Assurance Officer working within Cyber Design & Assurance, you will:

• Lead and support cyber security governance, risk management, compliance and assurance activities across Airservices information technology (IT), operational technology (OT), cloud and critical infrastructure environments.


• Conduct and oversee security assurance activities to support system accreditation, Authorisation to Operate (ATO), reassessment, and ongoing compliance obligations.


• Lead cyber security risk assessments and compliance reviews for new and existing systems, projects and services.


• Develop, maintain and monitor cyber security risk registers, treatment plans and risk acceptance artefacts, ensuring effective management and visibility of cyber security risks.


• Review and assess security documentation provided by vendors, suppliers and service providers to ensure compliance with contractual, regulatory and security requirements.


• Plan, coordinate and participate in audits, compliance assessments, IRAP activities and regulatory reviews, including management of findings and remediation actions.


• Monitor compliance with applicable legislation, standards and frameworks including the Information Security Manual (ISM), Protective Security Policy Framework (PSPF), Security of Critical Infrastructure Act (SOCI), Privacy Act, and relevant aviation obligations.


• Provide expert guidance on preventative, detective and corrective security controls and assess their effectiveness in reducing organisational cyber risk.


• Support the evaluation and operation of Governance, Risk and Compliance (GRC) platforms and tooling used for risk management, compliance and control assurance and reporting.

Please see the link below to view the full Position Description:

Senior Cyber Compliance & Assurance Specialist ASA7B - Position Description (1).docx

What You’ll Bring

• Significant experience in cyber security governance, risk management, compliance and assurance functions within complex enterprise, government, critical infrastructure or regulated environments.


• Experience managing audit activities, remediation programs and compliance improvement initiatives.


• Experience with regulatory and compliance frameworks such as ISO 27001, NIST CSF, SOCI Act, Privacy Act, CIS Controls and IRAP assessment processes.


• Strong working knowledge of Australian Government security frameworks including ISM, PSPF and Essential Eight.


• Experience operating or administering Governance, Risk and Compliance (GRC) platforms such as ServiceNow IRM/GRC, Archer, MetricStream or similar solutions.


• Experience working with critical infrastructure, operational technology (OT), aviation, government, defence, utilities or similarly regulated industries would be highly regarded.


• Well-developed written and oral communication skills, including writing for a wide range of technical and non-technical audiences

Qualifications

• A relevant degree or industry qualification e.g. CRISC, CISSP, CISM, IRAP Assessor, ISO 27001 Lead Auditor, ISO 27001 Lead Implementer, SABSA, FAIR, or equivalent.

At Airservices Australia, we embrace and thrive on diversity of thought, perspectives, and capabilities because we know the benefits of having a workforce that is representative of the community that we serve. We appreciate everyone is unique, and acknowledge diversity in thought leads to greater transparency and improved consideration in our decision making.

We believe a diverse workforce supported by an inclusive culture is central to our success. We actively encourage and welcome candidates from all cultural backgrounds, gender identities, people living with disability and Aboriginal and Torres Strait Islander peoples to apply.

Security Clearance

To be eligible to apply, you must be an Australian Citizen and be eligible to obtain and maintain an Australian Government Security Vetting Agency (AGSVA) Negative Vetting Level 1 (NV1) security clearance.

Why Join Us?

Airservices Australia manages over 11% of the world’s airspace and plays a vital role in keeping Australia’s skies safe. We are committed to safety, innovation, and resilience. As part of our cyber security leadership team, you’ll help protect the systems that underpin national aviation operations.