Security Delivery Architect

• Provide security architecture guidance across cloud, infrastructure, network, endpoint, and identity platforms.
• Validate security requirements for new and existing solutions.
• Conduct design reviews to identify risks and control gaps.
• Develop and maintain architecture and security design documentation.
• Engage directly with Australian Government clients to facilitate security workshops, architecture reviews, and risk discussions.
• Translate business and regulatory requirements into practical and effective technical outcomes.
• Conduct security assessments, gap analyses, and cybersecurity maturity reviews.
• Present findings, recommendations, and remediation strategies to technical and executive stakeholders.
• Provide security oversight throughout project lifecycles, from requirements gathering through implementation and operational transition.
• Participate in governance forums, design authorities, and technical review boards to ensure solutions meet security, architecture, and contractual requirements.
• Support customer pursuits and pre-sales activities by providing cybersecurity subject matter expertise.
• Contribute to solution designs, statements of work (SOWs), and technical proposals.
• Participate in customer workshops and solution discussions.
• Identify opportunities for security uplift, advisory services, and managed security engagements.
• Conduct security risk assessments and maintain risk registers.
• Develop risk mitigation and treatment recommendations.
• Develop and maintain security standards, policies, procedures, and supporting documentation.
• Support audit, assurance, and accreditation activities aligned to the Information Security Manual (ISM), Essential Eight, and Protective Security Policy Framework (PSPF).
• Provide architecture guidance and control reviews aligned with ISM requirements.
• Support clients in preparing for IRAP assessments and accreditation activities.
• Develop security documentation, evidence packs, and compliance artefacts.
• Collaborate with assessors, project teams, and stakeholders to address and remediate assessment findings.
• Review vulnerability assessment and security reporting outputs.
• Support vulnerability prioritization and remediation activities.
• Assist Security Operations Centre (SOC), engineering, and client teams during security incidents.
• Contribute to incident reporting, investigation, and corrective action planning.

Requirements

• Demonstrated experience in security architecture, cybersecurity consulting, security engineering, governance, risk and compliance (GRC), or security operations.
• Experience working within government, defence, or other highly regulated environments.
• Strong understanding of the Information Security Manual (ISM), Essential Eight, PSPF, and security assurance practices.
• Experience conducting security assessments, architecture reviews, and remediation planning activities.
• Experience supporting projects through design, implementation, and operational transition.
• Strong stakeholder management and communication skills across business, technical, and executive audiences.
• Practical knowledge of cloud platforms, infrastructure, networking, endpoint security, and identity technologies.

Core Competencies

Demonstrates expertise in security architecture and cybersecurity consulting, with a strong focus on governance, risk, and compliance in highly regulated environments. Proficient in conducting security assessments and developing risk mitigation strategies aligned with industry standards such as ISM and PSPF.

Highest-signal resume keywords

• Security Architecture
• Cybersecurity Consulting
• Governance, Risk And Compliance (GRC)
• Information Security Manual (ISM)
• Cloud Platforms

ATS Optimization Keywords Hard Skills

• Security Assessments
• Architecture Reviews
• Risk Mitigation
• Vulnerability Assessment
• Security Design Documentation
• Remediation Planning
• Cybersecurity Maturity Reviews
• Security Standards Development
• Incident Reporting
• Compliance Artefacts

Soft Skills

• Stakeholder Management
• Communication Skills

Industry Keywords

• Essential Eight
• Protective Security Policy Framework (PSPF)
• Government
• Defence
• Highly Regulated Environments

Tools & Technologies

• Cloud Platforms
• Infrastructure
• Networking
• Endpoint Security
• Identity Technologies