Consultant Security Assessor

About the role

The Consultant Security Assessor will support Essential Eight maturity assessments for Federal Government, Defence and regulated industry clients. This hybrid role in Canberra offers a foundation in audit and technical security capabilities while learning government security frameworks.

Key responsibilities

• Support delivery of Essential Eight assessments through document reviews, evidence gathering and control validation.
• Assist in evaluating control design and effectiveness across core Essential Eight domains.
• Document findings with clear linkage to evidence and maturity criteria, and contribute to remediation recommendations.
• Participate in client interviews and workshops alongside senior team members.
• Maintain alignment to assessment methodologies, quality standards and governance processes.

Required profile

• 2‑4 years experience in cyber security, IT risk or related technology environments.
• Exposure to security controls, infrastructure or system administration concepts.
• Experience in documentation review, analysis or audit activities is desirable.
• Relevant tertiary qualification in information security, IT or related discipline.
• Working towards certifications such as Security Plus or CISA is a plus.

Required skills

• Foundational understanding of the Essential Eight maturity model.
• Familiarity with Australian Government security frameworks (ISM, PSPF).
• Basic awareness of broader frameworks such as NIST and ISO 27001.
• Ability to apply structured assessment approaches under supervision.

What we offer

• Flexible work arrangements with hybrid onsite/remote options.
• Comprehensive benefits package including wellness incentives, additional flex leave and gender‑neutral parental leave.
• Career development opportunities and support for professional certifications.