Security Specialist

Seeking a Security Specialist with5+ years IT Security or Security Architecture experience, with a proven ability to develop and maintain security artefacts

We are seeking a Security Specialist to lead the Essential 8 (E8) maturity uplift and Post-Quantum Cryptography (PQC) transition activities. As required by the PSFP, the Department is required to document and report on Essential 8 maturity, and Post- Quantum readiness. The Security Specialist will identify key risks, drive and coordinate uplift across a range of technical stakeholders and will monitor and report progress. You will play a key role in ensuring the Department identifies, plans, and transitions to an Essential 8 mature, quantum-resistant future.

Key Responsibilities

• Post-Quantum Stocktake: Undertake a stocktake of asymmetric cryptography in use across the Department identifying and documenting risks
• Post-Quantum Cryptography Transition Plan: Following ACSC guidance, develop a post-Quantum Cryptography transition plan that ensures compliance and alignment to the PSPF Directive and PSPF reporting.
• Essential 8 Maturity Assessments: Engage capability managers across the Department to assess and document the Essential 8 maturity of systems and capabilities in the Department.
• Essential 8 Uplift and Post-Quantum Cryptography Transition Plan: Working with key technical stakeholders, plan and drive Essential 8 and quantum resistant cryptography uplift activities.
• Essential 8 to Essentials Transition: Develop Essential 8 Transition to Essentials PlanPSFP Reporting: Monitor uplift and transition activity progress and document findings for use in PSPF reporting.

Desirable Qualifications

CISSP or other relevant industry IT Security certifications. Tertiary qualifications in Cyber Security IRAP Assessor

Required Knowledge/Experience and tools

• 5+ years IT Security or Security Architecture experience, with a proven ability to develop and maintain security artefacts.
• Strong verbal and written communication abilities, including communicating technical and security concepts to both technical and non-technical audiences.
• Proficiency in assessing systems for their Essential 8 maturity, and provide strategic guidance to support decision making.
• Good understanding of pre-quantum and post-quantum planning risk identification and remediation, including use of the LATICE framework.

SFIA Skills/Attributes Required;

• Information Security (SCTY) Level 4-5 Desirable;
• Security Operations (SCAD) Level 4-5
• Information Assurance (INAS) Level 4-5

Contract

12 Months Contractwith 2 x 12 months extension option

Security Required

TSPVSecurity clearance required

Location -

Canberra

Closing date

Monday 9 November 2026