Job Description
Role
Lead Cyber Security Specialist - (EL1 Level)
Location: Canberra
Length of contract: 12 months
Contract extensions: 24 months extension (two extensions of twelve months each)
Security clearance: Must have Negative Vetting Level 1 security clearance
Job details
This role provides guidance on the application and operation of security controls, performing security risk and business impact analyses, and identifying risks from potential technical solution architectures.
The role designs alternate solutions or countermeasures to mitigate identified risks and provide recommendations for appropriate security policies, standards, and guidelines.
Managing risks related to the use, storage, and transmission of data, and carry out of risk management activities within specific functions or projects is also a part of this role.
This includes identifying risks and vulnerabilities, assessing their impact and probability, developing mitigation strategies, and reporting these to the business.
This role will ensure the protection and management of risks associated with information systems, contributing to a secure and compliant digital environment.
Ideal candidate: A strong technical background with relevant risk assessment qualifications such as the CISSP and/or CCSP, a deep understanding of cyber threats facing government, and the ability to work within a high-security environment.
This is a mission-critical role where expertise will directly contribute to the protection of our global infrastructure.
Key duties and responsibilities
Conduct comprehensive risk assessments across IT systems, applications, and third-party vendors.
Evaluate and monitor compliance with Australian Government requirements such as the PSPF, ISM, and Essential Eight, and apply additional oversights from international frameworks such as ISO *****, NIST, and GDPR.




Develop and maintain cybersecurity policies, standards, and procedures.
Perform gap analyses and recommend remediation strategies.
Collaborate with internal stakeholders to ensure alignment with security governance objectives.
Support audits and certification processes (e.g., IRAP assessments).
Monitor and report on the effectiveness of security controls.
Stay current with emerging threats, technologies, and regulatory changes.
Prepare comprehensive reports for business and senior executives, translating complex technical findings into explicit, actionable treatments and recommendations.
Technical skills and qualifications
Highly desirable certifications include CISSP, CRISC, CCSP, or equivalent; ISO ***** Lead Auditor, or IRAP are desirable, with other qualifications in government-specific cyber security programs considered highly.
Experience authoring ICT system authorisation documentation including Security Risk Management Plans (SRMPs), System Security Plans (SSPs), and Standard Operating Procedures (SOPs).
Experience in technical ICT areas such as system administration, software development, and cloud computing.
In-depth knowledge of Australian Government cyber security standards, such as the PSPF and ISM.
Familiarity with one or more: AWS, Azure, Kubernetes, Identity and Access Management.
Minimum current active NV1 security clearance.
Knowledge of emerging threats and international frameworks such as NIST, GDPR, and/or PCI DSS.
Ability to communicate complex information to both technical and non-technical stakeholders.
Understanding of data protection, privacy legislation, and compliance requirements.
Note: If you would be interested to apply, kindly share your updated CV ******
Seniority level
Mid-Senior level
Employment type
Contract
Job function
Information Technology
Industries
Staffing and Recruiting
Government Administration
#J-*****-Ljbffr

📌 Lead Cyber Security Officer (New South Wales)
🏢 IT Alliance Australia
📍 New South Wales