Cyber Security Grc Specialist

This pay rate is inclusive of mandatory 25% casual loading

As the agency roles out a number of greenfield projects it is an exciting time to join as a trusted cyber security GRC SME and advise them on the relevant security requirements in line with the Essential 8 and ISM. You won't only be doing interesting work but also working for an agency which aims to benefit society and make a real difference to the lives of the people who utilise their services. This is an initial 18 month daily rate contract, very favourable in this market.

Please note, you MUST currently hold an NV1 security clearance to be eligible for this role.

• Providing advice about technical capability and risks to a range of internal and external stakeholders on matters related to cyber security and tailored technical advice and recommendations suitable to different stakeholders
• Duties
• Supporting the CIO and Directors to achieve technical objectives and assist them in briefing senior leaders on current priorities
• Leading and participating in cross-functional projects to implement new technologies, solutions, or enhancements that align with the agency's goals and security requirements
• Providing cyber security advice that assists with the monitoring of infrastructure components, the design of infrastructure, identify areas for improvements, and assist with the implement upgrades, new sites and expansions or enhancements as required
• Collaborating and assisting with the development and review of ICT policies, procedures and guidelines to maintain a secure and compliant environment
• Participating in inter-agency collaborations and working groups to share insights and contribute to broader government ICT strategies
• Assessing and advising government and critical infrastructure entities on their current security posture
• Implementing Federal Government security standards, ISM, Essential 8, PSPF, etc.
• Providing guidance on viable security options across different scenarios, with a strong focus on (GRC) to meet regulatory and organisational requirements
• Ability to identify risks, provide risk reduction strategies, and collaborate with business teams to secure stakeholder approval and support
• Conducting thorough information security risk assessments to identify and evaluate potential threats and vulnerabilities
• Developing comprehensive security policies to address and mitigate risks
• Requirements
• Experience in cyber security focusing on security governance, risk and compliance
• Experience working in agile environments, with an ability to adapt to changes in project direction and stakeholder expectations
• Practical experience implementing ISM and Essential 8 frameworks
• Ability to produce high quality reports for technical and non-technical stakeholders
• Experience assessing the potential risks and security standards of greenfield environments
• Experience in the Federal Government sphere or knowledge of Federal Government governance structures.