Solution Design Managers/cyber security uplift delivery -Canberra, Brisbane, Melbourne, Sydney and Adelaide

IT Alliance Australia; Canberra; On-site; AUD 150,000 - 190,000; Full time

Job summary

IT Alliance Australia is seeking a Solution Design Manager (Cyber Security) at EL1 level for multiple Australian cities, including Canberra. The role focuses on developing and maintaining high-quality cyber security documentation and system design artefacts to support compliance and governance across government ICT projects.

Responsibilities include producing SSPs, SRAs, architecture descriptions, SOPs, and accreditation artefacts, translating complex concepts into clear material for diverse

Qualifications

• Cyber security knowledge and experience.
• Demonstrated experience producing cyber security and ICT documentation within large and complex government environments.
• Strong written communication and stakeholder engagement skills.

Responsibilities

• Develop and maintain System Security Plans (SSPs), Security Risk Assessments (SRAs), security control documentation and accreditation artefacts.
• Produce high-quality technical documentation, including solution designs, architecture descriptions, standard operating procedures and user documentation.
• Translate complex cyber security and ICT concepts into clear, consumable documentation for technical and non-technical audiences.
• Support compliance activities with PSPF, ISM, Essential Eight and other government frameworks.
• Maintain documentation repositories and ensure artefacts remain current throughout the system lifecycle.

Skills

Cyber security knowledge

Stakeholder engagement

Technical writing

Documentation

Written communication

Tools

REST APIs

CI/CD & DevSecOps

Job description

One of our federal govt clients is seeking to engage Solution Design Managers -Cyber Security - (EL1 Level) for Canberra, Brisbane, Melbourne, Sydney and Adelaide

Please note Candidates must have NV1 Security clearance

• Canberra, Brisbane, Melbourne, Sydney and Adelaide
• 12 months + 24 month extensions

Overview-

Solution Design Managers (Technical Writers) are responsible for developing, maintaining and managing high-quality technical, operational and governance documentation to support cyber security initiatives and ICT project delivery. They work closely with architects, engineers, business analysts, project teams and stakeholders to translate complex technical concepts into clear, concise and fit-for-purpose documentation.

The role supports the delivery of cyber security uplift activities through the development of security documentation, system design artefacts, operational procedures, accreditation evidence and governance materials required to support compliance, assurance and operational outcomes.

Key duties and responsibilities

• Develop and maintain System Security Plans (SSPs), Security Risk Assessments (SRAs), security control documentation and accreditation artefacts.
• Produce high-quality technical documentation, including solution designs, architecture descriptions, standard operating procedures, implementation guides and user documentation.
• Translate complex cyber security and ICT concepts into clear and consumable documentation for technical and non-technical audiences.
• Support compliance activities associated with Protective Security Policy Framework (PSPF), Information Security Manual (ISM), Essential Eight and other government cyber security frameworks.
• Work closely with architects, engineers, project managers and business stakeholders to capture requirements and document solution outcomes.
• Maintain documentation repositories and ensure artefacts remain current throughout the system lifecycle.
• Support governance, audit and assurance activities through the preparation of evidence and reporting documentation.
• Facilitate documentation reviews and incorporate stakeholder feedback.
• Contribute to knowledge transfer activities and uplift internal capability through the development of supporting guidance and reference material.

Technical Skills (continued)

• Representational State Transfer (REST) Application Programming Interface (APIs)
• and related integration technologies.
• CI/CD and DevSecOps.

Knowledge/Qualifications

• Cyber security knowledge and experience;
• o Protective Security Policy Framework (PSPF)
• o Information Security Manual (ISM)
• o National Institute of Standards and Technology (NIST)
• Demonstrated experience producing cyber security and ICT documentation within large and complex government environments.
• Experience developing SSPs, security accreditation artefacts and technical design documentation.
• Strong written communication and stakeholder engagement skills.

• 1.Demonstrated experience delivering cyber security uplift, cyber resilience, security remediation or compliance initiatives within large and complex ICT environments, preferably within Australian Government or other regulated environments.
• 2.Demonstrated and proven experience performing the duties and responsibilities relevant to the role being applied for, including the required technical skills, technologies, frameworks and methodologies
• 3.Demonstrated experience applying cyber security frameworks, policies and standards, including the Protective Security Policy Framework (PSPF), Information Security Manual (ISM), Essential Eight and other relevant security and risk management frameworks.
• 4.Demonstrated ability to engage, influence and collaborate with a broad range of stakeholders, including senior executives, technical specialists, business representatives and external providers.
• 1.Demonstrated experience delivering cyber security, infrastructure, ICT transformation or uplift activities within Australian Government agencies.
• 2.Demonstrated experience identifying, assessing and managing cyber security risks, vulnerabilities, compliance obligations and remediation activities.
• 3.Experience working within large-scale enterprise environments involving cloud platforms, identity and access management, security operations, infrastructure, applications and data services.
• 4.Demonstrated ability to deliver outcomes within tight timeframes while managing competing priorities, dependencies and stakeholder expectations. Demonstrated ability to communicate complex technical and cyber security concepts to both technical and non-technical audiences and contribute to capability uplift through mentoring, collaboration and knowledge transfer activities.