Senior Cyber Risk and Design Security Specialist

Airservices Australia; Melbourne; On-site; AUD 140,000 - 190,000; Full time

Job summary

Airservices Australia is seeking a Senior Cyber Risk and Design Security Specialist in Melbourne to drive cyber risk, design security and assurance across critical technology and operational environments.

You will provide expert advice across projects and work with architects, engineers and vendors to embed security through the lifecycle, ensuring secure and resilient aviation systems. NV1 clearance is preferred.

Qualifications

• Demonstrated experience in Cyber Security Risk Management, Security Assurance, Design Security, GRC or Security Advisory functions.
• Experience conducting security risk assessments, threat assessments and security reviews.
• Strong experience defining, analysing and reviewing security requirements across information and cyber security disciplines.
• Experience delivering security assurance, accreditation, certification and compliance activities across projects and programs.
• Practical knowledge of the Australian Government Information Security Manual (ISM), Protective Security Policy Framework (PSPF), Essential Eight, NIST Cyber Security Framework and/or other recognised security standards and frameworks.
• Strong stakeholder engagement and communication skills, with the ability to influence both technical and non-technical audiences.
• Current NV1 Security Clearance, or the ability to obtain and maintain an NV1 Security Clearance.

Responsibilities

• Deliver cyber security risk, assurance and design security outcomes across critical technology environments.
• Provide expert cyber security advice across Airservices' portfolio of projects, programs and operational systems.
• Embed security throughout the system lifecycle and support delivery of secure and resilient technology solutions.
• Contribute to technology assessments, security requirements development, security assurance activities and accreditation processes across ICT, cloud and OT environments.
• Influence major technology initiatives while supporting security and resilience of Australia's aviation network.
• Collaborate with project teams, architects, engineers, vendors and external stakeholders to embed secure design.

Skills

Cyber security risk management

Security assurance

Design security

GRC

Security advisory

Security risk assessments

Threat assessments

Security reviews

Security requirements analysis

Security accreditation

Compliance activities

ISM

PSPF

Essential Eight

NIST CSF

Stakeholder engagement

Communication skills

NV1 clearance

Education

CISSP

CISM

CRISC

SABSA

Job description

Senior Cyber Risk and Design Security Specialist

• Deliver cyber security risk, assurance and design security outcomes across critical technology environments

Summary

Join a high-performing cyber security team providing specialist advice and assurance across complex technology programs and operational environments. Help shape secure-by-design outcomes, manage cyber security risks and support the resilience of systems that underpin Australia's aviation services.

The Organisation

Airservices Australia is a government-owned organisation responsible for the safe and efficient management of 11% of the world’s airspace and provision of aviation rescue firefighting services at Australia’s busiest airports.

Our people are our greatest asset with a dynamic and diverse team operating from locations across the country - from bustling cities to regional and remote locations, including an island. This team keep is helping to secure the future of Australia’s skies and keep it amongst the safest in the world.

We connect people with their world safely – linking family and friends, generating economic activity, creating jobs, and facilitating trade and tourism.

Airservices is committed to fostering a culture that is diverse, inclusive, and respectful. We encourage motivated individuals who love what they do, value a service first mindset and embrace a challenge to explore a career with Airservices. In return you will be a valued team member, be offered flexibility and experience a meaningful career in an exciting, ever-evolving aviation industry.

The Role & The Team

Join Airservices' Cyber Security Design and Assurance function and play a key role in delivering cyber security risk, design security and assurance outcomes across critical technology and operational environments.

As a Senior Cyber Risk and Design Security Specialist, you will provide expert cyber security advice across Airservices' portfolio of projects, programs and operational systems. Working closely with project teams, architects, engineers, vendors and external stakeholders, you will help embed security throughout the system lifecycle and support the delivery of secure and resilient technology solutions.

You will contribute to technology assessments, security requirements development, security assurance activities and accreditation processes across ICT, cloud and operational technology environments.

This is an opportunity to influence major technology initiatives while supporting the security and resilience of systems that underpin Australia's aviation network.

Please see the link below to view the full Position Description.

Senior Cyber Risk and Design Security Specialist.pdf

The Person

You are a collaborative cyber security professional who enjoys managing security risks, influencing stakeholders and delivering practical security outcomes. You thrive in complex, highly regulated environments and are passionate about strengthening security, governance and organisational resilience.

Ideally, you will bring:

• Demonstrated experience in Cyber Security Risk Management, Security Assurance, Design Security, GRC or Security Advisory functions.
• Experience conducting security risk assessments, threat assessments and security reviews.
• Strong experience defining, analysing and reviewing security requirements across information and cyber security disciplines.
• Experience delivering security assurance, accreditation, certification and compliance activities across projects and programs.
• Practical knowledge of the Australian Government Information Security Manual (ISM), Protective Security Policy Framework (PSPF), Essential Eight, NIST Cyber Security Framework and/or other recognised security standards and frameworks.
• Strong stakeholder engagement and communication skills, with the ability to influence both technical and non-technical audiences.
• Current NV1 Security Clearance, or the ability to obtain and maintain an NV1 Security Clearance.

Highly Regarded

• Experience within Government, Defence, Aviation, Critical Infrastructure, Transport or other highly regulated environments.
• Experience across ICT, Cloud and Operational Technology (OT) environments.
• Experience supporting major technology programs, enterprise transformation initiatives or security architecture and design reviews.
• Experience delivering cyber security risk management outcomes across public and private sector organisations.
• Relevant tertiary qualifications and/or industry certifications such as CISSP, CISM, CRISC, SABSA or equivalent.

At Airservices Australia, we embrace and thrive on diversity of thought, perspectives, and capabilities because we know the benefits of having a workforce that is representative of the community that we serve. We appreciate everyone is unique and acknowledge diversity in thought leads to greater transparency and improved consideration in our decision making.

We believe a diverse workforce supported by an inclusive culture is central to our success. We actively encourage and welcome candidates from all cultural backgrounds, gender identities, people living with disability and Aboriginal and Torres Strait Islander peoples to apply.

Security Clearance

To be eligible to apply, you must be an Australian citizen as an AGSVA security clearance is required for this role. Please refer to the security check requirements successful applicants will be required to undertake as part of the recruitment process.

Applications close 11.55 pm (AEST) 21 Nov 2026.