Profectus is seeking an experienced Senior Cyber Security Strategist to lead the development of a cyber security strategy, uplift roadmap and supporting business cases for an essential services provider.
You will work across corporate IT and operational technology environments, assess current maturity against recognised security standards and regulatory obligations, and set out a realistic and costed path forward.
The role covers both the thinking and the doing.
You will shape the plan, secure executive and Board support for it, then help deliver the projects that come out of it.
This is a senior advisory role for someone who takes a risk based view of cyber security, can translate obligations into practical work, and is credible with technical teams and executives alike.
Key ResponsibilitiesDevelop and refine the enterprise cyber security strategy across IT and operational technology environmentsAssess current state against relevant security standards and regulatory obligations and define a realistic path to the required maturityTake a risk based approach to prioritisation so effort is directed where the exposure sitsProduce a prioritised, costed, multi year uplift roadmap covering sequencing, dependencies and delivery governanceWrite investment ready business cases including options analysis, benefits, costs, risks and delivery approachRun workshops with business, IT and operational technology stakeholders to gather requirements, test findings and build agreementPrepare briefs,



papers and reports that stand up to executive and Board scrutinyManage delivery of cyber uplift projects including scope, schedule, budget and reportingProvide practical guidance to architecture and operations teams as solutions move into implementationEstablish the structures and processes needed to sustain the uplift once the program closesProvide subject matter input on Microsoft security technologies, standard operating environment uplift, MFA and identity and access management, and network security including segmentation, gateways and monitoring
Required ExperienceDemonstrated experience delivering cyber security uplift, compliance or resilience projects and programsExperience contributing to or leading enterprise cyber security strategyExperience developing costed, multi year cyber roadmaps with explicit sequencing and dependenciesBusiness case development including options analysis, benefits, CapEx and OpEx modelling and risk analysisWorking knowledge of at least two of ISO *****, NIST CSF, Essential Eight, ISM and PSPF, applied in a practical assessment or uplift settingStrong business writing skills across business cases, assessment reports, recommendations and roadmapsFacilitation and workshop skills,



with the ability to run a room and land an outcomeStakeholder engagement at all levels, from executive leadership through to technical analysts and non technical business ownersProject or program management experience covering planning, reporting, budget and resource managementBusiness requirements analysis and the ability to turn ambiguity into a defined scope of workKnowledge of Microsoft security technologies, standard operating environment uplift, MFA and identity and access management, and network securityExperience presenting to executive committees and boards, including securing investment approvalsExposure to operational technology security risk, including segmentation of OT networks
Desirable ExperienceConsulting or advisory backgroundExperience in infrastructure, utilities, energy, water or health environmentsFamiliarity with the Security of Critical Infrastructure Act and associated obligationsExperience developing cyber risk methodologies, business criticality models or target operating modelsExperience building cyber awareness and training programs
Working ArrangementsOnsite, Canberra
Why ProfectusProfectus partners with clients across essential services, infrastructure and industry to deliver work that matters.
We take pride in matching skilled people to roles where they can do their best work, and we back our consultants with genuine support throughout every engagement.
Join a team that values quality, integrity and long term relationships, and work on projects that make a real difference to the services communities rely on.

📌 Cyber Security Specialist (Canberra)
🏢 Profectus
📍 Canberra