Cyber Security Architect

⁠⁠⁠The Department of Industry, Science, Energy and Resources (DISER) requires the services of a cyber security architect to assist the cyber security team provide security architectural design review services to various stakeholders, including program and project team members, enterprise and solution architects and, the IT Security Advisor (ITSA). This is a position which requires at least 5 years of relevant and current security architecture experience in both on-premises and cloud environments. Superior interpersonal skills are essential to ensure effective and considered communication and collaboration with stakeholders, both non-technical and technical.

To ensure the security architecture design review requirements are met, as per the department’s Authority to Operate Framework (AtOF), the security architect will be responsible for providing considered advice in line with the department’s processes and policies and security frameworks including the Information Security Manual (ISM), Protective Security Policy Framework (PSPF) and Information Security Registered Assessors Program (IRAP). The security architect will be an integral part of two departmental design authorities – Architecture & Design Authority (ADA) and Technical Design Authority (TDA). The chosen candidate will have demonstrated extensive experience working as a security architect, with knowledge of the ISM, PSPF and IRAP processes, with exemplary communication skills able to demonstrate articulate security related architectural design decisions and respond appropriate to questions on matters related to cyber security design.

The candidate will be responsible for:

• Reviewing and providing constructive advice on architectural designs from a cyber security perspective.
• Providing leadership through the active consideration and resolution of cyber security concerns at the ADA and TDA.
• Producing quality cyber security documentation and commentary.
• Effectively communicating security concepts and controls to technical and non-technical stakeholders.
• Providing considered security advice to stakeholders, team members and Executive.
• Taking direction from the ITSA and representing the ITSA as and when required.
• Facilitating and negotiating discussions to an agreeable decision.