Principal Systems & Cyber Security Specialist

About the role

Raytheon Australia is seeking an experienced Principal Systems & Cyber Security Specialist to shape the cyber security posture of some of Australia's most important Defence capabilities. You will provide expert systems and cyber security leadership across a diverse portfolio of Defence programs, working with engineering teams, program leadership and Defence stakeholders to keep complex systems secure, resilient and compliant with Defence security requirements. The role involves regular travel and direct engagement with Defence stakeholders and customers.

Key responsibilities

• Act as a trusted cyber security advisor to internal program teams and Defence stakeholders.
• Influence system and solution design to achieve secure-by-design and cyber-resilient outcomes.
• Lead and support Cyber Security Assessment and Authorisation (CSAA) activities across assigned programmes.
• Partner with systems engineering and project delivery teams to integrate security requirements throughout the capability lifecycle.
• Develop and maintain security documentation and assurance artefacts needed to achieve and sustain Defence security authorisation.
• Drive security governance, risk and compliance (GRC) outcomes aligned with Defence security frameworks.
• Lead cyber security risk management and give trusted risk advice to program and engineering leadership.
• Provide subject matter expertise on the PSPF, ISM and DSPF, and engage with authorisation authorities to progress security authorisation.
• Support business development, bid and capture activities through cyber security expertise and compliance guidance.
• Mentor and provide technical leadership to security practitioners.

Required profile

• 8+ years' experience in cyber security, systems engineering or a related discipline, preferably in Defence or the Defence industry.
• Australian citizen, eligible to obtain and maintain an AGSVA security clearance at NV1 level or higher.
• Experience leading CSAA activities and developing security artefacts such as SSPs, SSP-As, SRMPs, IRPs, CMPs, SAPs and POAMs.
• Experience applying GRC principles in complex programmes and supporting business development, bid and capture activities is highly regarded.

Required skills

• Strong knowledge of the PSPF, DSPF and ACSC ISM.
• Ability to turn complex technical and cyber security risks into clear, actionable advice for engineering, program and customer stakeholders.
• Excellent written communication and stakeholder engagement skills.
• Relevant certifications such as CISSP, CISM, CISA, SABSA or IRAP Assessor are highly regarded.

The role is based in Mawson Lakes, with multiple location options including Brisbane, Adelaide and Sydney, and offers a fast-paced environment, great benefits and career opportunities.