INFORMATION TECHNOLOGY SECURITY OFFICER

SPO: IC3SPO
Project: CAF16
Skill Level: Level 2
Location: ACT
Remote Work: No – ACT-based candidates only
Supported Capabilities: Australian Defence Force Electronic Flight Bag (ADF EFB) and Air Movements Tasking and Control System (AMTACS)

Role Overview

The Information Technology Security Officer will support the Integrated Command, Control and Communications Systems Program Office (IC3 SPO) across the ADF Electronic Flight Bag and AMTACS capabilities.

The successful candidate will act as the Information Technology Security Manager (ITSM) for both systems and will be responsible for maintaining their security posture, supporting system accreditation and authorisation, managing cyber security risks and incidents, and providing security advice to Defence stakeholders.

The role will work closely with system management, engineering, capability management and external support providers to ensure security requirements remain aligned with Defence policy and operational priorities.

Key Responsibilities

The successful candidate will:

- Monitor and maintain the cyber security posture of ADF EFB and AMTACS.
- Investigate and manage cyber security incidents.
- Provide security risk, compliance and governance advice.
- Support system security accreditation, assessment and authorisation activities.
- Maintain security documentation, risk assessments and governance artefacts.
- Report security matters to system owners and relevant stakeholders.
- Support sustainment and operational outcomes for both capabilities.
- Engage with Defence stakeholders, industry partners and support providers.
- Maintain system authorisation throughout the capability lifecycle.




- Support continuous improvement of security controls and practices.

Essential Experience and Skills

Candidates should demonstrate:

- Formal qualifications in Information Security, Cyber Security, Information Technology or a related discipline.
- Experience performing Information Technology Security Manager (ITSM) duties within Defence, Government or a complex enterprise ICT setting.
- Strong practical knowledge of:
- Australian Government Information Security Manual (ISM).
- Defence Security Principles Framework (DSPF).
- Relevant Defence and Commonwealth cyber security policies.

- Experience supporting security accreditation, assessment and authorisation activities.
- Experience preparing and maintaining security documentation and risk assessments.
- Experience administering, supporting or governing Mobile Device Management (MDM) solutions, including cloud-hosted environments and mobile security controls.
- Experience providing cyber security advice to business, operational and technical stakeholders.
- Strong technical, governance and administrative documentation skills.
- Strong analytical, problem-solving and cyber risk management capability.
- Excellent written and verbal communication and stakeholder engagement skills.
- Ability to work independently under broad direction and manage competing priorities.

Desirable Experience





The following would be highly regarded:

- Experience supporting Defence aviation capabilities.
- Experience engaging with Capability Management representatives such as Headquarters Air Command, Air Movements Control Centre or the ADF EFB user community.
- Understanding of emerging Defence and Commonwealth cyber security policy requirements.
- Experience with cloud-hosted environments, SaaS platforms and mobile workforce technologies.
- Experience with Microsoft 365 security and compliance capabilities.
- Knowledge of contemporary mobile security, endpoint management and secure mobility architectures within Defence or Government environments.

Personal Attributes

The successful candidate should be:

- Proactive, motivated and outcome focused.
- Collaborative and confident engaging across multiple stakeholder groups.
- Well organised with strong time-management skills.
- Capable of exercising sound judgement in complex or high-pressure environments.
- Committed to remaining current with emerging cyber security threats, technologies and regulatory requirements.

Candidate Profile

This opportunity would suit an experienced IT Security Officer, Information Technology Security Manager, Cyber Security Advisor, Security Assurance Analyst or System Security Specialist with a strong background in Defence or Government environments.

The strongest candidates will combine practical experience across ITSM responsibilities, ISM/DSPF compliance, security accreditation, cyber risk management and MDM/mobile security, with the ability to produce high-quality documentation and engage confidently with technical, operational and capability stakeholders.

📌 Information Technology Security Officer (Canberra)
🏢 Business Review Group
📍 Canberra