Senior Cyber Security Architect

Acolade Consulting; Canberra; On-site; AUD 180,000 - 240,000; Full time

Job summary

Acolade Consulting seeks an experienced Senior Cyber Security Architect for a Canberra-based project with Baseline Clearance. The role is onsite for 6 months with possible extension, focusing on security architecture, risk assessment, and vendor engagement.

Responsibilities include engaging stakeholders, conducting vendor risk assessments, and aligning security controls with departmental requirements while advancing security strategy and policy implementation.

Qualifications

• Minimum 5+ years in Cyber Security Strategy design, development and implementation.
• Experience conducting security assessments on infrastructure, networks, and applications.
• Experience providing security consulting to large, complex projects with vendor engagement.
• Experience performing security reviews and compliance testing against security standards.
• Ability to prepare and coordinate strategic advice and reports for executive decision making.
• Experience assessing and implementing security & risk standards (ISO 27001/2, PCI-DSS, Cloud Security, ISO 31000).

Responsibilities

• Engage with stakeholders to understand requirements and translate into security requirements for vendors.
• Conduct vendor risk assessments and review vendor responses to align controls.
• Collaborate with Solution Architects to inject security requirements into designs.
• Review High Level Solution Architecture Design documents and endorse them after security is satisfied.
• Work with project, program, IDS and vendor stakeholders to document and remediate security risks.
• Assess new operational risks against current controls and develop mitigation strategies.
• Refresh the IDS Cyber Security Strategy within the Security Architecture Team.

Skills

Security assessments

Cyber security strategy

Vendor risk assessments

Security reviews

Strategic reports

ISO 27001/2

ITIL

PM/PRINCE2

Job description

Job: - Senior Cyber Security Architect - (Must have Baseline Clearance)

Duration: - 6 Months (Possible Extension)

Location: - Canberra (Onsite)

We are looking for an experienced Senior Cyber Security Architect for one of the government organisations for an upcoming project.

Required Skills

• Experience in conducting security assessments on infrastructure, network, application designs.
• Minimum of 5+ years of experience in Cyber Security Strategy design, development and implementation.
• Experience in providing security consulting to large and complex projects with the ability to engage with vendors and review vendor proposals.
• Experience in performing regular security reviews and compliance testing to ensure adherence to adopted security standards.
• Experience in preparing and coordinating strategic advice, research, information and reports on diverse and complex policy, planning and operational matters to ensure the appropriate analysis of issues to support executive decision making.
• Experience assessing and implementing security & risk standards (e.g., ISO 27001/2, PCI-DSS, Cloud Security, ISO 31000 etc).
• Strong knowledge on the ITIL Service Management Framework and its practical execution within IT projects.
• Strong knowledge on PMP and/or PRINCE2 Project Management Frameworks and their practical execution within IT projects.

Responsibilities

• Engage with stakeholders throughout the Department to understand their requirements and build tailored security requirements that vendors must satisfy.
• Conduct vendor risk assessments by reviewing, interpreting and responding to detailed vendor responses to security requirement specifications to ensure alignment between vendor security controls and the Departments security requirements.
• Engage with Solution Architects to build appropriate security requirements that would need to be injected into new or modified solution designs.
• Review High Level Solution Architecture Design documents that are presented and provide endorsement to these once all security requirements have been satisfied.
• Collaborate with all project, program, IDS and vendor stakeholders to ensure that security risks are documented, acknowledged and where necessary remediated prior to formal vendor engagement or solution development/implementation.
• Assess new operational risks against current security and technology controls to determine risk rating and also work with the risk owner to ensure appropriate mitigation strategies are developed.
• Work within the Security Architecture Team to refresh the IDS Cyber Security Strategy.

Security Clearance

• Candidates must have Baseline Security Clearance.