Senior Cyber Security Assessor: Essential Eight Expert

EY; Canberra; Hybrid; AUD 140,000 - 190,000; Full time

Benefits offered by this job

Flexible work arrangements

8 weeks of flex leave per year

Gender-neutral parental leave (up to 6

Gender neutral paid parental leave up

Job summary

EY in Canberra, ACT, is seeking a Senior Consultant Cyber Security Assessor to deliver Essential Eight maturity assessments for government and regulated clients. The role combines end-to-end assessment delivery with evidence collection, control validation and findings development, operating with autonomy under supervision for engagement leads.

You’ll work on diverse assurance engagements across Federal Government, Defence and regulated industries, with flexible/hybrid options based in Ngambri,

Qualifications

• Four to seven years’ experience in cyber security, risk or assurance roles.
• Experience contributing to or delivering security assessments.
• Experience working in government or regulated environments desirable.
• Industry certifications such as CISA, CISSP, CISM or ISO 27001 Auditor desirable.

Responsibilities

• Deliver Essential Eight assessment activities for assigned workstreams from planning through to reporting.
• Conduct detailed document reviews and onsite validation of security controls.
• Assess design and operating effectiveness of controls against maturity requirements.
• Develop clear and defensible findings, evidence summaries and remediation recommendations.
• Engage directly with client stakeholders to validate control implementation.
• Contribute to development of assessment reports and executive level outputs.
• Provide guidance and oversight to Consultants, supporting quality and consistency.
• Support continuous improvement of assessment methodologies and delivery approaches.

Skills

Essential Eight

NIST framework

ISO 27001

CISA

Education

Bachelor's degree in information security

Job description

EY in Canberra, ACT, is seeking a Senior Consultant Cyber Security Assessor to deliver Essential Eight maturity assessments for government and regulated clients. The role combines end-to-end assessment delivery with evidence collection, control validation and findings development, operating with autonomy under supervision for engagement leads.

You’ll work on diverse assurance engagements across Federal Government, Defence and regulated industries, with flexible/hybrid options based in Ngambri,