Lead Cyber Advisor

DAFF are seeking a highly skilled technical resource to join our high-performing and fast paced ICT cyber security team. 

This resource will conduct reviews and provide input into the development of the entire suite of Security documentation, including System Security Plan Annex (SSP-A), System Security Plans (SSPs). The resource should be proficient in conducting Security Risk assessments of ICT systems and applications in line with current Protective Security Policy Framework (PSPF) requirements and the Information Security Manual (ISM) with an emphasis on attention to detail.

The applicant must have:

1. 5 years’ experience working within Government conducting security risk assessments in a cyber team.
2. Experience in conducting security risk assessments with Azure Cloud, Legacy ICT systems, AI Technology and complex systems.
3. Current knowledge and experience providing guidance on application and system designs relating to PSPF, ISM and Essential Eight.
4. Experience in liaising with non-technical and technical stakeholders in relation to cyber security issues, system risks and recommendations.  
5. Experience in presenting risk assessments and findings to senior executive audiences.
6. Assist in identifying opportunities to improve the security posture of the department’s environment.  
7. Strong understanding of networking infrastructure.
8. Understanding of Operational Technologies will be an advantage.  

Key duties and responsibilities

Skills and capability  

1. Ability to troubleshoot and resolve complex issues.  
2. Has sound judgement and the ability to work under pressure with limited supervision to produce high quality outcomes.  
3. Ability to manage a large workload. 
4. Ability to develop strong productive relationship, communication skills and issue resolution.  
5. Strong written ability is required to be able to explain complex systems to a non-technical audience.
6. Strong communication skills to present security artifacts to a senior audience confidently. 
7. Collaborate with cross-functional teams to implement security solutions and ensure compliance with Australian government standards and frameworks.  

Essential criteria

1.5 years’ experience working within Government conducting security risk assessments in a cyber team.

2.Experience in conducting security risk assessments with Azure Cloud, Legacy ICT systems, AI Technology and complex systems.

3.Current knowledge and experience providing guidance on application and system designs relating to PSPF, ISM and Essential Eight

4.Experience in liaising with non-technical and technical stakeholders in relation to cyber security issues, system risks and recommendations.

5.Experience in presenting risk assessments and findings to senior executive audiences

6.Strong understanding of networking infrastructure.

Desirable criteria

1.Understanding of Operational Technologies will be an advantage.

Must be ACT based to work in the Canberra office 5 days a week.