Setting the Scene

Our client is a large Queensland Government organisation undertaking a significant, multi-year cyber security transformation program, designed to strengthen its security posture, modernise existing technologies and reduce organisational risk. With a broad and complex technology setting, the organisation is investing in several key security initiatives spanning Secure Access Service Edge (SASE), Data Loss Prevention (DLP), Application Control and Privileged Access Management (PAM). As part of this investment, they are seeking an experienced Information Security Domain Architect to provide strategic and technical architecture expertise across the program, helping shape future‑state security capabilities and ensure the successful delivery of enterprise‑wide security improvements.

The Role

As an Information Security Domain Architect, you’ll play a pivotal role in defining, designing and establishing secure architecture solutions across a major cyber security transformation program. Working closely with the Project Manager, Program Manager, Enterprise Architects, Solution Architects and technical specialists, you’ll assess existing security environments, identify gaps and develop future‑state architecture designs aligned with organisational security objectives and industry best practice.

Key Responsibilities

- Develop and maintain comprehensive information security architecture aligned with organisational objectives, security standards and enterprise architecture principles.
- Assess and document existing security environments, technologies, policies and processes to establish current‑state (As-Is) architecture.
- Define future‑state (To-Be)



security architectures, frameworks, roadmaps and architectural standards.
- Provide architectural leadership across major cyber security initiatives, including SASE, Data Loss Prevention (DLP), Application Control and Privileged Access Management (PAM).
- Work closely with Enterprise Architects and Solution Architects to develop logical and physical solution architecture designs.
- Translate business requirements into technical architecture outcomes, ensuring solutions balance security, functionality and operational requirements.
- Undertake security gap analysis, identify critical path dependencies and recommend appropriate remediation activities.
- Conduct market research and evaluate security products, technologies and tooling to support solution selection and implementation.
- Develop detailed option analyses, business cases, concepts of operation and solution recommendations.
- Identify, assess and provide recommendations for the treatment of information security risks.
- Align security architecture initiatives with recognised frameworks and standards, including NIST Cybersecurity Framework (CSF) 2.0.
- Collaborate with technical specialists, vendors and business stakeholders to establish architectural requirements and design solutions.




- Develop and maintain architecture documentation, including requirements, use cases, user stories, design artefacts and technical specifications.
- Contribute to security policies, processes, configuration decisions, reporting dashboards and BAU operating models.
- Support the development of transition plans and decommissioning strategies for legacy systems and technologies.
- Provide architectural guidance and oversight to Solution Architects across the broader cyber security program.
- Mentor and support developing architects, contributing to capability uplift and knowledge sharing across the security function.
- Work closely with project and program leadership to support governance, project deliverables and successful program outcomes.

What You’ll Bring

- Extensive experience in an Information Security Architect, Cyber Security Architect, Security Domain Architect or Senior Solution Architect position.
- Demonstrated experience designing and delivering enterprise security architectures across complex technology environments.
- Strong experience contributing to or leading large‑scale cyber security transformation and uplift programs.
- Proven ability to assess existing environments and develop future‑state security architecture designs and roadmaps.
- Strong understanding of enterprise security architecture principles, frameworks, standards and governance.
- Experience across several of the following security domains:

- Secure Access Service Edge (SASE) and Zero Trust Architecture.
- Data Loss Prevention (DLP).
- Privileged Access Management (PAM).
- Identity and Access Management (IAM).

📌 Information Security Domain Architect (Brisbane)
🏢 Decipher Bureau
📍 Brisbane