Role Type

On-site • Contract • Full-time • Experienced

Description

About the Opportunity

Opes Cyber Security, in partnership with DXC Technology, is seeking an experienced Security Architect or Governance, Risk and Compliance (GRC) Consultant to support a significant Government data and analytics transformation program. The engagement is expected to commence with a discovery and architecture definition phase, focused on refining business requirements, confirming the target operating model and validating the technology and software platform selections required to support the transformation.

The anticipated solution will incorporate secure data ingestion and integration across Government, rules and analytics, explainable AI, workflow automation and human-led decision-making across classified LOW and HIGH environments.

The Security Architect / GRC Consultant will play a critical role in ensuring security is embedded throughout the transformation lifecycle. Working closely with enterprise architects, solution architects, technical leads, business stakeholders and delivery teams, you will provide security architecture guidance, assess risks, define security requirements and ensure the proposed solution aligns with Australian Government security policies, frameworks and assurance obligations.

The role may suit an experienced Security Architect with a strong understanding of secure enterprise technology environments, or a senior GRC professional with experience supporting complex Government technology programs, security assessments and accreditation activities.

A key focus will be ensuring the proposed data and analytics capabilities can operate securely across classified environments, with appropriate controls for data protection, access management, information sharing, system integration and ongoing operational security.

This is an opportunity to influence the security posture of a complex Government transformation from initial discovery and architecture definition through to implementation and sustainment.

Key Responsibilities

- Provide security architecture and GRC guidance throughout the discovery, design and implementation phases of the program.
- Work with enterprise and solution architects to ensure security requirements are embedded into the overall enterprise and solution architecture.
- Conduct security assessments of proposed technology platforms, architectures, integrations and operating environments.
- Define and document security architecture principles, requirements, controls and design recommendations.
- Assess security implications associated with data ingestion, integration, analytics, explainable AI and workflow automation.
- Ensure proposed solutions address the security requirements of classified LOW and HIGH environments.
- Provide guidance on security boundaries, information-sharing arrangements,



access controls and data protection mechanisms.
- Conduct security risk assessments, identify vulnerabilities and evaluate threats associated with proposed solutions and technology platforms.
- Develop and maintain security documentation, including security architecture designs, risk assessments, control matrices and security recommendations.
- Support the assessment and selection of COTS and Government-proven technology platforms, including consideration of security suitability and compliance.
- Work with technical teams to ensure security controls are appropriately implemented across infrastructure, applications, data platforms and integration services.
- Provide advice on identity and access management, authentication, authorisation, encryption, logging, monitoring and security operations.
- Support security assurance, accreditation and authorisation activities, including the development and review of relevant security artefacts.
- Assess compliance against Australian Government security frameworks, policies and standards.
- Identify and manage security risks, gaps, dependencies and remediation activities throughout the program.
- Engage with Government security stakeholders, system owners, technical specialists and delivery partners to communicate security requirements and recommendations.
- Support security testing, validation and assurance activities prior to deployment and transition into operational environments.

Essential Experience and Skills

- Demonstrated experience in a Security Architect, Cyber Security Consultant or senior GRC role.
- Experience supporting complex technology programs within Australian Government, Defence, National Intelligence or similarly regulated environments.
- Robust understanding of Australian Government security requirements, policies and frameworks, including the Information Security Manual (ISM).
- Experience conducting security risk assessments, security architecture reviews and compliance assessments.
- Understanding of security requirements across enterprise technology, data platforms, applications and systems integration.
- Experience developing security documentation, risk registers, control assessments and security recommendations.
- Strong understanding of information security principles, including access management, identity management, encryption, data protection and security monitoring.
- Experience assessing security risks associated with cloud, hybrid,



on-premises or classified technology environments.
- Ability to work collaboratively with enterprise architects, solution architects, engineers, business stakeholders and security teams.
- Strong stakeholder engagement and communication skills, including the ability to explain complex security requirements to technical and non-technical audiences.

Desirable Experience

- Experience delivering security architecture or GRC activities within large-scale Government data and analytics transformation programs.
- Experience supporting security accreditation and authorisation processes within classified environments.
- Exposure to PROTECTED, SECRET and TOP SECRET environments.
- Experience with DISP requirements and Defence security frameworks.
- Familiarity with platforms such as Palantir, Pega and Appian.
- Experience assessing enterprise data platforms such as Databricks and Snowflake.
- Understanding of secure data ingestion, cross-domain information sharing and data sovereignty requirements.
- Experience with explainable AI, machine learning, advanced analytics and workflow automation from a security and governance perspective.
- Experience with cloud security architecture, including secure cloud environments and hybrid infrastructure.
- Knowledge of the Australian Government Protective Security Policy Framework (PSPF).
- Experience with Essential Eight, ISO 27001, NIST and other recognised security frameworks.
- Relevant certifications such as CISSP, CISM, SABSA, CRISC or equivalent.

Location and Working Arrangements

Canberra-based candidates are strongly preferred, with an expectation of on-site engagement to support client and stakeholder interactions.

The Ideal Candidate

We are looking for a security professional who can balance strategic security architecture with practical risk management and assurance. You will understand how to translate Government security requirements into workable technical and operational controls, working alongside architects and engineering teams to ensure security is considered from the outset rather than treated as an afterthought.

You will be comfortable navigating complex Government environments, engaging with security stakeholders, assessing emerging technology risks and providing clear recommendations to support secure technology delivery.

Whether your background is in security architecture or GRC, you will bring a strong understanding of classified environments, Government security frameworks and the challenges of delivering secure, enterprise-scale data and analytics solutions.

Experience across Defence, National Security or large-scale Federal Government technology programs will be highly regarded.

Successful candidate must hold an active NV2 minimum, with a TSPV being preferred.

Company Overview

https://opescyber.com.au/

📌 Security Architect / GRC Consultant (Yarralumla)
🏢 Employment Hero
📍 Yarralumla