Company Description

AMR Technology is an Australian sovereign cyber and digital advisory firm with offices in Canberra and Newcastle, partnering primarily with government and highly regulated organisations that operate complex, large-scale technology environments. The leadership team brings deep Defence and regulated sector experience, applying disciplined, research-informed methodologies to client engagements. AMR operates on a vendor-neutral basis, ensuring independent advice and solutions tailored to each client’s needs.

Where required, the firm scales capability through a structured sovereign partner network of more than 1,300 specialists across Australia and can deploy AGSVA-credentialed expertise for sensitive assignments. This environment offers professionals the opportunity to work on mission-critical projects that shape national cyber resilience and digital transformation.

Role Description The Senior Consultant, Security & Infrastructure is a full-time, hybrid role reporting to the Director, based in Canberra, Newcastle or Sydney with periodic travel. AMR is in active growth and this role extends our permanent workforce. Scope will expand with the business.

The role has two halves. The first is assessment and assurance: Essential Eight and ISM maturity work, control-level gap analysis, ISO 27001 and SOC 2 readiness, and the client ISMS that has to stay current between audit cycles. The second is implementation, taking the uplift program from endorsed roadmap through to a control state that is built and evidenced, coordinating technical resources across multiple client sites and holding both the schedule and the output standard.

Some weeks you will be assessing a live environment and writing the findings that go to an executive committee. Other weeks,



sequencing specialists across three sites and reviewing work you did not produce yourself. The autonomy is real and the standard is high.

You will not be doing this alone. You will work alongside experienced practitioners on uplift programs across government, defence, critical infrastructure, and regulated enterprise. We are looking for a robust infrastructure and GRC foundation, and are willing to invest in training and credentials to ensure the right cultural fit that will grow with our team.

This is a foundational role in an SME in a significant growth phase. Beyond client delivery, you will work with our senior practitioners and research partners to shape the internal systems, tooling, and methodology AMR runs on. Much of that is still being set, and this role has a hand in setting it. That is where the innovation in this space actually comes from.

Qualifications

▪ A network or infrastructure background with hands-on GRC delivery in a regulated environment.

▪ Experience establishing and maintaining an ISMS in a complex organisation.

▪ Program implementation at government or large enterprise grade, taken through to an evidenced end state.

▪ Multi-site, multi-resource scheduling and coordination, including review of work produced by others.

▪ Eight or more years across network, infrastructure, cyber security, or GRC delivery, with a degree in a related technical discipline.

▪ A current AGSVA Baseline clearance as a minimum.

Highly regarded

▪ Working knowledge of the Essential Eight, the ISM, NIST CSF, or ISO 27001 applied in delivery.

▪ ISO 27001 Lead Auditor, CISA, CISM, CISSP, or Microsoft security certifications. We fund these where they are not yet held.

▪ Prior work in the Australian Public Service, or Defence.

▪ A security clearance above Baseline.

📌 Senior Consultant, Security & Infrastructure (Sydney)
🏢 AMR Technology
📍 Sydney