Senior Cyber Security Architect & Risk Leader

Softtest pays pty ltd; Sydney; On-site; AUD 180,000 - 240,000; Full time

Job description

Australian Citizens residing in Australia only respond.

Job details

Role: EL2 Senior Cyber Security Specialist

The EL2 Senior Cyber Security Specialist (Labour Hire) is accountable under broad direction to undertake very complex design and security risk assessment work that delivers quality outcomes across the diverse technology functions of the NDIA.

The position is an important position within the NDIA and will have delegated authority and responsibility to resolve issues and risks across wide-ranging activities of substantial depth involving significant detail.

The role will provide design leadership, risk evaluation and decision making and is responsible for actively managing key internal and external stakeholder relationships.

The position is responsible for actively managing key internal and external stakeholder relationships and where required will represent and negotiate on behalf of the NDIA to advance the NDIA's interests across a range of forums.

Key duties and responsibilities

Responsibilities of the role include but are not limited to:

• Developing cyber security architecture and detailed security design documents, including Role Based Access controls for NDIA internal systems.
• Leading and conducting risk assessments for NDIA internal systems and assessing risk from external connections.
• Undertaking compliance activities in relation to cyber security standards within the Agency aligned to cyber security architecture and industry best practice.
• Resolving complex IT related issues and risks across wide-ranging activities of substantial depth involving significant detail. Developing and participating in the implementation of NDIA initiatives focused on the reduction of technology risk, governance and compliance to policies and regulatory compliance.
• Developing and applying IT security standards, policy, procedures, and controls for managing risks.
• Supporting various business areas by ensuring stakeholders adequately address all relevant compliance standards such as the PSPF, ISM, Agency Risk Management Frameworks and incident management disciplines.
• Presenting to senior forums, project teams and other groups at a technical and business level and working with a broad range of stakeholders in a collaborative and solution oriented manner.
• Completing and investigating internal and external information security risk and exceptions assessments and documenting and reporting control failures and gaps to stakeholders.

(NOTE: the key responsibilities of the role are based on current priorities and may change over time)