Lead Cyber Security Adviser

Role: Lead Cyber Security Adviser
Contract: 12 months contract (possible extensions)
Location: QLD, ACT, VIC, SA
Work Type: Hybrid
Security clearance: Baseline / NV1 security clearance

Key duties and responsibilities

• Contribute to the system authorization program of work, system projects and programs, by developing or reviewing security artefacts, including Security Risk Assessments, Plan of Actions, Milestones and System Security Plans.
• Assist business and system owners to attain and maintain Authorities to Operate for their systems.
• Identify, test, assess and assist with implementation of applicable security controls in line with Cyber Security Policy Guidelines, the Australian Government Protective Security Policy Framework (PSPF) and Information Security Manual (ISM).
• Analyze and document security risk and recommend treatments and modifications to security practices and procedures using expertise and technical knowledge.
• Manage, develop and support complex relationships with stakeholders to achieve work area goals.
• Manage and maintain the agreed service levels.
• Assist with the development and implementation of security policies, procedures, projects and strategies.
• Continuously work to improve the efficiency and effectiveness of the cyber security service.
• Educate and inform departmental staff to promote understanding and ensure adherence to security policy and processes.

Knowledge /Qualifications

• Demonstrated experience with risk and information security frameworks including PSPF
• Framework, ISM and ISO 27001/2.
• Demonstrated experience in assessing systems for Authority to Operate

Desirable:

• CRISC, CISSP, CISA
• IRAP certification (ASD IRAP endorsed)
• ISO 31000
• ISO /IEC 42001:2023 standard - ISO certification in AI Management system
• Azure Security Engineer associate AZ-500
• AWS Certified Security - Specialty (SCS- C02)
• ISACA - AI Security Training, AI Audit training

Technical skills

• Assessing technical configurations and applying Security Frameworks included ISM, Essential 8 and PSPF.
• Strong analytical skills to evaluate risks and provide risk remediation advice.
• Ability to explain technical information to non-technical individuals.