Address
Form of work
Salary- $115,899 - $130,733 (plus Super)
- Edinburgh - SA, Fishermans Bend - VIC
This role provides essential Cybersecurity Risk subject matter expertise to support to Group Cybersecurity Risk and broader Group Cybersecurity functional responsibilities. Under limited guidance from Discipline Leader Group Cybersecurity Risk, this position assists in the delivery of detailed information security policy & processes for specialised Digital Research capabilities across DSTG. This includes assisting in the development, administration and maintenance of the DSTG Information Environment (IE) Information Security Management System (ISMS); and the Certification & Accreditation of DSTG’s Research Fleet of ICT systems; and the provision of highly complex research information security advice to Digital Science and Scientific Computing (DSSC) stakeholders and DSTG System Managers.
The position contributes to the DSTG annual research cybersecurity planning cycle and the delivery of security improvements (both technical and policy based) through specific cybersecurity functional capability subject matter expertise and leadership, as well as assisting with the maintenance of the DSTG IE Security Document Suite and associated briefs, reports and communications. The role provides pragmatic advice regarding cyber security, resilience and assurance and supports other Group Cybersecurity matters.
The role undertakes stakeholder engagement across DSTG, Defence, Australian Government and external security professionals. The role requires the ability to apply best practice cyber security to new solutions/systems and make sound cyber-secure decisions in ambiguous research environments.
Key Duties/Responsibilities include:
- Use prevailing ASD/ACSC, best practice, and risk based professional judgement and initiative to provide advice for secure research network approaches, operating procedures, and Certification & Accreditation.
- Conduct risk assessments and manage and monitor the treatment of risks, including advising System Managers and relevant stakeholders.
- Produce complex information system security artefacts related to digital research capability, including Accreditation Briefs, DSTG leadership reports, security policies and plans, system specific operating procedures, and stakeholder engagement communications.
Group Cybersecurity Risk leads and delivers detailed information security policy & processes for specialised Digital Science capabilities across DSTG. This includes the development, administration and maintenance of the DSTG IE ISMS, the management of DSTG’s ICT System Certification & Accreditation Program, and the provision of information security advice to DSTG IE System Managers, researchers and other stakeholders.
Group Cybersecurity Risk also has stewardship of the annual Research Cybersecurity planning cycle and Security Risk Management Plan for the DSTG IE as well as the maintenance of the broader DSTG IE Security Document Suite and associated leadership briefs and communications. Group Cybersecurity Risk provides pragmatic leadership regarding cyber security, resilience and assurance and supports other Research cybersecurity matters.
Our Ideal Candidate
Our ideal candidate will have several years’ experience fulfilling a similar role in a complex heterogeneous digital systems environment involving multiple security classified systems and information. They will have advanced cyber security risk assessment and management training, such as CISSP and CISM and direct applied experience, including detailed knowledge of contemporary government policy, standards and guidance (PSPF, DSPF, ISM), and global information security standards such as the ISO 27000 series and NIST. This will also include practical, complex and technical system security design experience.
