About the role

We are seeking an experienced Senior Security Architect to provide security architecture leadership across a complex ICT transformation programme within a government workplace.

In this role, you will ensure that security, privacy, risk management and governance requirements are embedded throughout solution design and delivery. You will develop and maintain security architecture standards, principles and reference architectures, while providing expert guidance across cloud platforms, enterprise applications, data and analytics environments.

Key responsibilities

- Lead security architecture activities, ensuring security, privacy and governance requirements are embedded across solution designs and delivery outcomes.
- Develop and maintain security architecture principles, standards, patterns and reference architectures aligned with government policies and industry best practice.
- Provide security architecture leadership across Microsoft Azure, Microsoft 365, Dynamics 365, Power Platform, Databricks, integration platforms and enterprise data and analytics environments.
- Collaborate with enterprise, solution and data/AI architects to integrate security requirements across architecture domains.
- Lead security design reviews, architecture assurance activities, threat modelling workshops and technical risk assessments throughout the solution lifecycle.
- Define and govern security controls covering identity and access management, privileged access, information protection, encryption, monitoring, auditing and incident response.
- Provide expert advice on information privacy, classification, information sharing, records management, data retention and security governance.
- Lead security assurance, accreditation and compliance activities, including IRAP engagements, remediation planning,



control validation and audit readiness.
- Develop and maintain security architecture artefacts, risk assessments, control mappings, architecture decisions, standards and technical governance documentation.
- Advise executives, project teams, operational stakeholders and vendors on cyber security risks, compliance obligations and secure solution design.
- Translate complex security and regulatory requirements into practical, proportionate and sustainable technology solutions.

Highly desirable criteria

- Demonstrated experience in security architecture, cyber security, enterprise architecture or related technology leadership roles within complex enterprise environments.
- Proven experience delivering security architecture and governance outcomes for large-scale cloud, digital transformation, data and integration programmes.
- Strong hands-on knowledge of Microsoft Azure security services, Microsoft Entra ID, Microsoft 365 Security, Microsoft Defender and Microsoft Purview.
- Experience with Dynamics 365 security, Power Platform governance and security, Azure networking and cloud security controls.
- Strong understanding of identity and access management, Zero Trust architecture, identity-centric security and cloud-native security controls.
- Demonstrated understanding of Queensland Government Enterprise Architecture (QGEA), Information Standard 18 (IS18),



information classification frameworks and associated security governance obligations.
- Knowledge of Queensland's information privacy legislation, Information Privacy Principles, Privacy Impact Assessments and privacy-by-design approaches.
- Experience conducting security risk assessments, threat modelling, security assurance reviews and technology governance activities.
- Practical understanding of IRAP assessments, the Australian Signals Directorate (ASD) Essential Eight, ISO 27001 and other recognised security frameworks and standards.
- Ability to translate security, privacy and compliance requirements into practical business and technology outcomes.

Desirable criteria

- Experience working within government, regulatory, law enforcement, justice, health or other highly regulated environments.
- Experience providing security architecture leadership across multidisciplinary teams and complex ICT delivery programmes.
- Familiarity with enterprise data and analytics platforms, including Databricks, and their associated security and governance requirements.
- Experience developing security architecture reference models, reusable design patterns and enterprise-wide security standards.
- Experience supporting security accreditation, audit readiness, compliance remediation and continuous improvement initiatives.
- Understanding of information sharing arrangements, records management obligations and data retention requirements within government environments.

Contact details

For a confidential chat, please contact Shruthi on 0474 545 379 or via email at [email protected]. We would be more than happy to provide you with additional information and assist in the application process.

Please note that a National Police Check might be required as part of pre-employment screening.

📌 Senior Security Architect (Brisbane)
🏢 Exclaim IT
📍 Brisbane