IT Security Advisor

About the role

The IT Security Advisor leads the agency’s cyber‑security strategy, governance and operations. Reporting to senior executives, the role ensures alignment with Australian Government security frameworks such as the PSPF and ISM while supporting agency‑wide ICT delivery and uplift initiatives.

Key responsibilities

• Develop, implement and continuously improve cyber‑security strategy, policies and frameworks in line with PSPF and ISM.
• Provide independent advice to the Executive Board, CISO and CIO on risks, threats and mitigation strategies.
• Oversee vendor‑managed SIEM, Virtual SOC, SIG and SEG functions to detect and respond to active threats.
• Drive agency‑wide security uplift programmes, including IRAP assessments and Essential Eight maturity.
• Lead incident‑response capability, ensuring timely identification, containment and remediation of security incidents.
• Coordinate cross‑agency collaboration with internal branches and external stakeholders to strengthen the security posture.
• Manage procurement and assurance activities for cyber‑security services such as penetration testing and managed security services.
• Ensure governance, audit readiness and evidence‑based reporting for internal and external audits.

Required profile

• Australian citizenship.
• Proven senior‑level experience in cyber‑security strategy, governance and operations.
• Demonstrated leadership of multidisciplinary security teams.
• Willingness to travel interstate occasionally.

Required skills

• SIEM platforms.
• Virtual SOC operations.
• Security Incident Governance (SIG) and Security Event Governance (SEG).
• IRAP assessment processes.
• Essential Eight maturity framework.
• PSPF and ISM compliance.
• Penetration testing coordination.
• Incident response management.