Cyber Security Specialist

• Government Contract
• 6-month contract with possible extension
• Hybrid arrangement

We are seeking an experienced Cyber Security Specialist to provide expert advice and strategic direction across information security policy and governance.

As a champion for information security, you will deliver end-to-end information security advice and guidance using best practice and Australian and internationally recognised standards and strategies.

This role is embedded within the (BAU) Information Security (Governance, Risk & Compliance) team augmenting current internal capacity and capability. You will collaborate with internal business units and projects resources for the uplift of cyber risk management capability.

Reporting to the Manager, Information Security (GRC) this provides security expertise to the Governance Risk and Compliance team. The duties of this role may include some or all of the following:

• Provide technical advice, guidance and recommendations aligned to information security best practices and industry-recognised standards and frameworks.
• Apply a GRC focused risk-based approach to the review a range of project and technical documentation, including control options papers, technical specifications, designs, test and implementation plans.
• Understand and translate complex business and technical requirements to ensure that technical findings and recommendations are fit-for-purpose.
• Conduct and/or contribute to technical threat and risk assessments, including identification of security threats, vulnerabilities, and control gaps, and provide practical, proportionate mitigation recommendations.
• Communicate effectively with both business and technical stakeholders across all stages of the project or service lifecycle.
• Support the Manager Information Security in management of risks, issues, priorities, communications, and reporting.
• Work collaboratively with the internal Business units and projects to deliver improved information security risk outcomes.
• Undertake other activities as directed to support information security objectives.

Selection Criteria

To be successful in this role, you will have:

• 5+ years of relevant cyber security and/or architecture experience, including experience in principal/ lead roles for information security governance and project teams.
• Excellent interpersonal and communication skills to engage and build effective working relationships with a broad range of stakeholders.
• Knowledge and experience with information security controls frameworks such as ISO 27001, ASD ISM & E8, NIST CSF, PCI-DSS, and so on.
• Proven experience providing security architecture, assurance or operational support in large and complex organisations, such as Qld Government, transport, or similar organisations.
• Experience with development, operationalisation and improvement of ISMS frameworks, policies, standards guidelines and so on.

*Please note that only shortlisted candidates will be contacted.