Cyber Security Specialist – Defence MSP (Canberra/Melbourne)

About the role

Informatech is seeking a Cyber Security Specialist to support a Defence Managed Service Provider (MSP) in the certification, assessment and authorisation of defence systems. The role focuses on creating security artefacts aligned with the CSAAF Authority to Operate framework and requires a solid grasp of Australian defence security standards.

Key responsibilities

• Perform risk assessments using Operational Effectiveness Reviews.
• Audit the effectiveness of system security controls.
• Identify, analyse and evaluate cyber security risks, vulnerabilities and compliance with mandatory requirements.
• Develop and deliver security assessment artefacts such as Security Assessment Reports, ATO briefs, risk statements and remediation actions.

Required profile

• Australian citizenship with a current NV1 security clearance.
• Demonstrated experience delivering Defence Cyber Security Assessment and Authorisation (CSAA) services.
• Experience with radio and satellite communication systems.
• Strong knowledge of Australian cyber security frameworks and policies (ASD ISM, PSPF, Essential 8 Maturity Model, NIST SP 800, CSAAF).
• Relevant industry certifications preferred (CISSP, CRISC, CISM, ISO27001 Lead Auditor).

Required skills

• Defence Cyber Security Assessment and Authorisation (CSAA)
• Radio and satellite communication systems
• ASD ISM framework
• PSPF framework
• Essential 8 Maturity Model
• NIST SP 800 series
• CSAAF framework
• CISSP certification
• CRISC certification
• CISM certification
• ISO27001 Lead Auditor certification

What we offer

• $5,000 annual training allowance for permanent staff.
• Additional 5 days paid training leave.
• Exposure to large government projects and multiple client sites.
• $500 annual health and wellbeing allowance.