Cyber Security Assessor

Clearance Required: NV1

Citizenship: Australian

Based: Canberra, WFM & Customer Facing

• Cyber Security Assessor Level 4 (Consultant)

• Cyber Security Assessor Level 5 (Senior Consultant)

• Cyber Security Assessor Level 6 (Principal consultant)

The Cyber Security Assessor is part of a Cyber assessment team that is responsible for conducting assessments of various organisation’s cyber security hygiene.

Security Analysis: Conduct initial assessments of cyber security controls in a timely manner. Produce an assessment report using approved templates. As part of the assessment, provide recommendations for an Action Plan to uplift security controls.

Security Controls: Assess an organisation’s security posture through examining their security controls, design and operational effectiveness of proposed solutions, determine exposure to risk and suggest remediation strategies for an Action Plan as required.

Technical Knowledge: Research cyber security criteria from a wide range of sources. Knowledge of the application of Defence policies including the Defence Security Policy Framework (DSPF) and Information Security Manual (ISM). Seek guidance from more senior staff when required.

Record keeping and assessment: Prepare reports using agreed templates with minimal errors. Respond to questions from applicants in a timely manner. Ensure that all correspondence is filed correctly in Objective using the agreed filing conventions. Ensure Registry systems are updated timely.

Other roles and responsibilities:

• Ability to work independently
• Ability to work as a member of a close knit team
• Follow policies as set out by Defence
• An understanding of Project Management or Service Management principles desirable
• Capable of providing limited mentorship to junior team members

Previous experience:

• Stakeholder Management
• Written and verbal communication skills
• Ability to develop and deliver presentations and reports
• Basic foundations of Cyber Security principles and technologies
• Demonstrated ability to work effectively individually and as part of a team
• Must be an Australian Citizen
• Must hold or be capable of attaining an NV1 clearance
• Defence, Intelligence or Federal Government Experience is desirable

Education

• An understanding / awareness of the ACSC Essential 8, NIST 800-171, ISO27001, UK Def Stan 05-138, ACSC Information Security Manual, Defence Security Policy Framework (DSPF) and Defence Industry Security Program (DISP)
• Relevant Cyber/Information Security Certifications will be regarded