Lead Cyber Security Analyst – Risk Assessments | Government
This is a
hands-on assessment role
within a high-performing Federal Government cyber security team. The successful candidate will personally conduct security risk assessments, identify and document security risks, recommend appropriate treatments, and produce high-quality security documentation.
Key responsibilities
Conduct detailed security risk assessments of ICT systems and applications
Assess Azure cloud environments, legacy ICT systems, AI technologies and other complex systems
Identify security risks, control gaps and compliance issues, and develop practical risk treatment recommendations
Review system and application designs against the PSPF, ISM and Essential Eight
Prepare and maintain security risk assessments, System Security Plans, System Security Plan Annexes and supporting security artefacts
Clearly document assessment findings, risks, controls, recommendations and residual risk
Present security findings and artefacts confidently to senior and executive stakeholders
Work with technical and non-technical stakeholders to explain cyber security risks and recommended treatments




Collaborate with cross-functional teams to implement security solutions and improve the organisation's security posture
Manage multiple assessments and competing priorities in a rapid-paced environment
About you
At least 3–5 years' experience working within a government cyber security team and conducting security risk assessments
Proven hands-on experience completing security assessments for Azure cloud, legacy ICT, AI technologies and complex systems
Current and practical knowledge of the PSPF, ISM and Essential Eight
Strong experience preparing security risk assessments, System Security Plans, System Security Plan Annexes and related documentation
Demonstrated ability to identify, analyse, document and communicate security risks and recommendations
Experience providing security guidance on application, infrastructure and system designs
Strong understanding of networking infrastructure
Experience engaging with technical teams, business stakeholders, risk owners and senior executives
Excellent written communication skills, with the ability to explain complex technical risks to non-technical audiences
Must be able to obtain and maintain an NV1 security clearance
#J-*****-Ljbffr

📌 Lead Cyber Security Analyst – Risk Assessments | Government (Canberra)
🏢 seek.com.au
📍 Canberra