Lead Cyber Advisor (contract)

About the role
A federal government department’s ICT cyber security team is looking for a Lead Cyber Advisor to conduct security risk assessments and develop the full suite of security documentation including System Security Plans, SSP-As, and PSPF-aligned risk artefacts. You’ll assess systems across Azure Cloud, legacy ICT, and AI technology, provide guidance on application and system designs against ISM and Essential Eight, and present findings to senior executive audiences.
This is a senior advisory role with real ownership of formal security artefacts in a fast-paced government environment.

Key duties

• Conduct and review security risk assessments across Azure Cloud, legacy ICT systems, AI technology and complex systems
• Develop and review the full suite of security documentation including System Security Plans (SSPs) and SSP-As
• Provide guidance on application and system designs relating to PSPF, ISM and Essential Eight
• Liaise with technical and non-technical stakeholders on cyber security issues, system risks and recommendations
• Present risk assessments and findings to senior executive audiences
• Identify opportunities to improve the security posture of the department’s environment
• Collaborate with cross-functional teams to implement security solutions aligned to Australian government standards

About you

• 5 years’ government experience conducting security risk assessments in a cyber team (non-negotiable)
• Current knowledge of PSPF, ISM and Essential Eight applied to real systems
• Azure Cloud security assessment experience
• Strong understanding of networking infrastructure
• Able to communicate complex security risk clearly to both technical and non-technical senior audiences
• NV1 required or ability to obtain
• Must be Canberra based
• Understanding of Operational Technology is an advantage

The offer

• 12-month initial contract, 2 x 12-month extensions
• Onsite in Canberra, must be ACT based
• 40 hours per week
• EL1 equivalent