Overview:Role: Delivery Manager - Cyber SecurityClient: Department of Climate Change, Energy, the Environment and WaterProposed Rate & term - $150 per hour including Super | 12 month contract with 2x12 month extensionsLocation & work arrangements - Canberra | Hybrid, 3 days in officeSecurity Clearance: Must be able to obtain Baseline
Job details:The Department of Climate Change, Energy, the Workplace and Water (DCCEEW) requires the services of a Cyber Security Delivery Manager to lead the delivery of cyber security initiatives across a complex hybrid technology environment while also supporting the day-to-day operations of the Cyber Security Operations team.
The Cyber Security Delivery Manager will be responsible for managing technical resources, delivering cyber security uplift programs, implementing new security capabilities, and ensuring the ongoing effectiveness of existing security controls and services.
The role combines strong delivery management skills with practical cyber security experience and requires the ability to operate effectively across both project and operational environments, including participation in cyber security incident management and response activities.
Key duties and responsibilities:Key duties and responsibilities include but are not limited to:
Cyber Security Delivery & Project ManagementLead the planning, prioritisation, and delivery of cyber security projects and security uplift programs.Implement new security capabilities and ensure delivery outcomes meet business and security objectives.Balance competing priorities across multiple initiatives and operational requirements.
Team LeadershipManage and coordinate technical cyber security resources.Provide technical direction, mentoring, and leadership to cyber security specialists and project teams.Foster collaboration across security, ICT, business, and external stakeholders.
Security Operations & Incident ManagementSupport cyber security operations and continuous improvement of security controls and services.Contribute to cyber security incident response, major incident management, and lessons-learned activities.Drive remediation and improvement initiatives following security incidents.
Risk, Threat & Compliance ManagementMonitor emerging cyber threats, vulnerabilities, and technology trends.Identify security risks and develop proactive mitigation strategies.Ensure security activities align with organisational risk appetite, compliance requirements, policies, and strategic objectives.
Stakeholder & Vendor ManagementManage relationships with suppliers, vendors, and service providers.Coordinate delivery outcomes across internal business units and external partners.Communicate security risks, priorities,



and project outcomes to stakeholders at various levels.
This role would suit a delivery-focused cyber security professional who can operate effectively across both strategic delivery and hands-on operational environments while providing leadership to a technical cyber security team.
Technical skillsCloud Security (Azure & AWS)Cyber Security Operations & Incident ResponseSecurity Architecture & Modern Security ControlsVulnerability Management & Security Tooling
Selection Criteria:
Essential CriteriaCyber Security Program Delivery & Governance - Demonstrated experience leading large-scale cyber security uplift programs, applying contemporary project delivery methodologies, governance practices, and strategic planning to deliver successful security outcomes.Cyber Security Frameworks, Risk & Compliance - Strong knowledge of cyber security frameworks, standards, and compliance requirements, including Australian Government security frameworks, ASD guidance, Essential Eight, and organisational risk management practices.Cloud, Hybrid & Enterprise Security - Experience designing, delivering, and supporting security capabilities across cloud, on-premises, hybrid, and multi-cloud environments, including Microsoft Azure and AWS, with an understanding of associated security risks and controls.Security Architecture & Modern Security Controls - Expertise in modern security approaches, including Zero Trust, web application protection, secure access, DDoS mitigation, secure connectivity models, and enterprise security architecture.Security Operations, Incident Response & Resilience - Experience supporting cyber security operations, including security monitoring, incident management, threat detection and response, operational service delivery, and improving organisational security posture and resilience.Technical Leadership, Stakeholder Engagement & Reporting - Proven ability to lead and mentor technical teams, develop strategic work programs, produce governance and reporting artefacts, and communicate complex cyber security risks, initiatives, and performance outcomes to executives, stakeholders, and governance forums.

Desirable criteriaExperience implementing, managing, and optimizing enterprise security solutions, including Microsoft Purview, Microsoft Defender Suite, Tenable One,



and Cloudflare Security Platform.Experience working within DevSecOps environments and integrating security controls, testing, and governance into software development lifecycles and cloud delivery pipelines.Experience delivering and supporting security capabilities across Security Operations Centres (SOC), threat detection, incident response, and vulnerability management functions.Experience implementing and managing security controls across identity and access management (IAM), data protection, and cloud security domains to strengthen organisational security and compliance.
About Arctic Fox:
Powering the Federal Digital MarketplaceArctic Fox is a premier panel supplier on the Federal Government's Digital Marketplace, dedicated to sourcing and placing exceptional talent across all Federal Government Departments. We bridge the gap between complex national objectives and the specialized human capital required to achieve them.
Our approach is distinct because it is rooted in practice, not just theory. As practising Project Delivery professionals, we possess a genuine understanding and appreciation for the work our contractors undertake. We don't just read position descriptions; we understand the nuances of the delivery lifecycle. This peer-to-peer perspective allows us to leverage our practical experience in business and technology transformation to identify candidates who can truly deliver value from day one.
A Holistic Service for Government & ContractorsWe provide comprehensive, end-to-end contract management, covering everything from payroll to insurance, ensuring a seamless experience for both the Department and the Contractor. However, our value proposition extends far beyond administration.
We recognize that the Federal Government application process is unique and rigorous. To ensure our candidates put their best foot forward, we provide holistic support throughout the application lifecycle:Collaborative Brief Review: We don't just forward CVs. We complete a collaborative review of the client brief with each candidate, ensuring a deep alignment between the candidate’s capabilities and the specific opportunity.Selection Criteria Expertise: We undertake a thorough review of selection criteria responses. Our team provides critical feedback, insight, guidance, and editing services to ensure the candidate's expertise is articulated clearly and complies with government standards.
By combining deep domain expertise with a commitment to fiscal transparency and candidate coaching, Arctic Fox ensures that the Federal Government secures the best talent, while professionals feel supported, valued, and fairly compensated.
www.arcticfox.net

📌 Delivery Manager - Cyber Security (Canberra)
🏢 Arctic Fox
📍 Canberra