Principal Security Analyst Cyber Advisor

About the Role

We are seeking an experienced Principal Security Analyst Cyber Advisor to provide expert cybersecurity advice, assurance and risk management services within a large and complex government environment.

Working closely with technical and business stakeholders, you will be responsible for assessing cybersecurity risks, supporting system accreditation activities, and ensuring compliance with Australian Government security frameworks and standards.

Key responsibilities

• Conducting cybersecurity risk assessments and developing System Security Plans (SSPs) aligned to the Information Security Manual (ISM) and Protective Security Policy Framework (PSPF).
• Leading certification and accreditation activities for government systems and ICT projects.
• Assessing vulnerabilities, threats and security controls to determine residual risk and compliance obligations.
• Developing and maintaining cybersecurity documentation, including risk assessments, security plans and assurance artefacts.
• Supporting security audits, reviews and IRAP assessment activities.
• Providing strategic cybersecurity advice to project teams and business stakeholders.
• Contributing to the continuous improvement of ICT security processes, policies and procedures.
• Mentoring and guiding less experienced team members while fostering a strong security culture.

The Successful Candidate

To be successful in this position, you will bring extensive experience in cybersecurity governance, risk and assurance within Federal Government or similarly regulated environments.

You will demonstrate

• Strong knowledge of the Australian Government Information Security Manual (ISM) and Protective Security Policy Framework (PSPF).
• Experience delivering security accreditation and certification activities.
• Proven capability in cyber risk assessment, security assurance and compliance management.
• Strong understanding of security architecture and secure-by-design principles.
• Experience across network security, enterprise infrastructure security and security monitoring environments.
• Knowledge of cyber governance, compliance and assurance frameworks.
• Excellent stakeholder engagement, communication and advisory skills.
• The ability to work independently while collaborating effectively within multidisciplinary teams.
• Experience mentoring, coaching and supporting junior security professionals.

Location: Barton, Canberra ACT.

Office Type: Onsite

Contract terms: 36 months from commencement date, plus rolling 12 month extensions as required.

Estimated Hours: 37.5 per week

Security Requirements: Due to the nature of this position, candidates must hold a minimum NV1 security clearance.

We value diversity and welcome applications from Indigenous Australians, people from diverse cultural and linguistic backgrounds and people living with a disability.