Cyber Security Manager

About The Role:

The Cyber Security Manager is a member of the Engineering Support Team and works under the general guidance of the Deputy Chief Engineer.

The Cyber Security Manager is responsible for leading a team focused on cyber security risk mitigations across multiple Products internal to the organisation; delivering support services, specialist advice and reporting against hardware/software vulnerability monitoring, cyber supply chain risk management, Defensive Cybersecurity, incident response and ad-hoc specialist consultation.

The member is accountable for ensuring they have knowledge of and compliance with relevant financial and legislative frameworks, Commonwealth Government decision-making, and Defences directives and policy requirements.

Key Responsibilities:

• Conduct of vulnerability management activities, stakeholder communications and reports across all Products (both SW and HW components)
• Maintenance and execution of the Cyber Supply Chain Risk Management Plan
• Management and further development of both SOC capabilities and SOC analysts.
• Leadership of threat hunt planning, execution, and reporting
• Cyber Security Operations including development and maintenance of Standard Operating Procedures
• Analysis and application of Cyber Threat Intelligence (CTI) to Products
• Cyber Security stakeholder engagement within broader Defence Digital Group and Defence Department
• Leadership of internal Cyber Security training
• Maintaining contemporary knowledge of strategic cyber security issues and threats, and subsequent education or awareness briefings for internal personnel
• Specialist ICT security advice into Product Team design, development, and test activities
• Incident Response Plan execution and maintenance (IRP)

About You:

• Essential:
  • ICT Security Governance, Risk and Compliance (GRC) or equivalent experience
  • Open-source intelligence analysis, risk assessments and technical reporting
    
  • SOC based Cyber Incident response, as both an analyst and Manager
    
  • Threat modelling, threat hunt planning and execution
    
  • SIEM optimisation and tuning
    
  • Supply chain risk assessments and reporting
    
  • Vulnerability assessment and management
    
  • Certificate IV-Cyber Security, Intelligence Operations or Security and Risk Management
    
  • NV2 Security

• Desirable:
  • Have held a Security Operations Centre (SOC) role
    
  • MITRE ATTACK experience
    
  • SCAP, STIG and CIS standards experience
    
  • Agile / Scrum experience
    
  • DevSecOps and CI/CD pipeline security
    
  • Network and host digital forensics
    
  • SIEM design and deployment
    
  • Containerisation security controls and logging
    
  • Australian military or Department of Defence experience
    
  • Australian intelligence organisational collaboration / experience

If this sounds like you, wed love to hear from you.
Working in defence means being part of a team that values collaboration, problem-solving, and purpose-driven work. You'll have the chance to develop your skills, tackle meaningful challenges, and contribute to something that makes a real difference.

Job ID: L9Y693Y4