Job Description

An opportunity is available for an experienced

n

Cyber Security Assessors to support the independent assessment of cyber security risks across complex Defence ICT capabilities. You will provide evidence-based assurance and risk advice that enables senior stakeholders to make informed decisions about the security and operation of critical technology environments.

n

n
- Start ASAP through to 30 June 2027
n
- Canberra strongly preferred, with Melbourne also considered. Work will primarily support Defence environments and will include attendance at Defence sites.
n
- Current NV2 security clearance required.
n
- Key experience: Cyber security assessments, ICT security assurance, risk analysis, security control assessment and robust knowledge of Australian Government and Defence security frameworks.
n

n

Your Duties Will Include

n

n
- Conduct independent cyber security assessments in accordance with Defence and Australian Government security policies, frameworks and assessment methodologies.
n
- Assess the effectiveness of security controls and identify security threats, vulnerabilities and associated risks.
n
- Prepare transparent, evidence-based security assessment reports and risk briefs for technical teams and senior decision-makers.
n
- Engage with project teams, system owners, technical specialists and senior stakeholders throughout assessment activities.
n
- Provide practical cyber security advice,



guidance and risk-based recommendations.
n
- Support assessment prioritisation, assurance activities and broader security reporting requirements.
n
- Maintain independence and objectivity throughout assessments, including identifying and declaring potential conflicts of interest.
n

n

Skills And Experience We Are Looking For

n

n
- Demonstrated experience conducting ICT security assessments, security audits, assurance reviews or cyber risk engagements.
n
- Experience assessing complex ICT environments including networks, cloud services, enterprise systems or emerging technologies.
n
- Strong understanding of the Australian Government Information Security Manual (ISM), Protective Security Policy Framework (PSPF) and Defence Security Principles Framework (DSPF).
n
- Ability to communicate complex security risks clearly through high-quality written assessments and executive-level reporting.
n
- Strong stakeholder engagement skills, ideally gained within Defence or Australian Government environments.
n
- Relevant security certifications such as CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor or IRAP Assessor are highly regarded; equivalent practical experience will also be considered.
n
- Strong professional judgement, attention to detail and the ability to provide independent, evidence-based security advice.
n

📌 Cyber Security Assessor (Canberra)
🏢 Talent
📍 Canberra