Lead IT Security Advisor in Canberra

• One of our
• Federal Government Clients is seeking to engage a
• Lead IT Security Advisor - EL1

Applicable for Federal Government.

• Job Details
• Contract Duration: 03 Years (12 Months initially + 24 Months extension)
• Work Location: Canberra (Hybrid – 03 Days Office / 02 Days home each week)
• Eligibility: You must need to have Baseline Security Clearance or above.
• Tentative Start Date: 1st May 2026
• Role Description

The role is advisory and assurance focused and does not include responsibility for the operational execution of cyber security controls, security operations, or SOC functions.

Fulltime access to senior advisory capability is critical to maintaining continuity of judgement and effective oversight within a complex, cloud based and vendor delivered ICT environment.

The IT Security Advisor will work closely with internal cyber security personnel, platform owners, delivery teams, and external service providers to support secure design, informed decision making, and effective assurance.

• Key duties and responsibilities
• Providing continuous, independent cyber security advice across Agency platforms, systems, and services, with a focus on cloud based and outsourced environments.
• Supporting the uplift and sustainment of cyber security maturity, including Essential Eight implementation, Zero Trust principles, and continuous improvement activities.
• Advising on cyber security risk management, including risk identification, assessment, treatment, residual risk, and executive level risk acceptance and decision making.
• Providing oversight and assurance of security controls implemented by internal teams and external service providers, including review and interpretation of security assessments, audits, third party assurance artefacts, and inputs supporting continuous assurance and ATO aligned decision making.
• Supporting the development and maintenance of cyber security policies, standards, plans, and guidance that enable delivery teams and vendors to meet Agency security requirements.
• Providing advisory support across the Agency on secure design and architecture, control selection, shared responsibility models, incident preparedness and post incident improvement, and cyber security awareness and capability uplift.

Qualifications/Experience

• Comprehensive knowledge of Australian Government cyber security requirements, including the ISM and PSPF.
• Strong experience in cyber security risk management, including but not limited to NIST, ISO 31000 and ISO 27005.
• Understanding of ISO 27001aligned ISMS concepts as they relate to control selection, assurance, and risk-based decision making (not certification ownership).
• Demonstrated experience providing senior IT security advisory services in cloud based and outsourced ICT environments.
• Experience supporting cyber security maturity uplift, including Essential Eight implementation and sustainment.
• Experience providing assurance and advisory services across vendor delivered and managed security services, with strong communication skills to engage effectively with technical specialists, senior executives, and governance committees.
• Engagement Model and Performance
• The IT Security Advisor will be engaged on a fulltime basis to provide continuity of expertise and sustained advisory support.

The role may be delivered through a mix of onsite and remote engagement, subject to Agency requirements.

• Performance will be measured against the effective delivery of advisory, enablement, and assurance outcomes, with regular performance and priority setting discussions held with the Chief Information Security Officer.
• #J-18808-Ljbffr