Cybersecurity Certification Consulting Engineer

Provide system assessment and authorisation activities as directed by the client engineering manager.

Conduct assessment and authorisation in line with ASD ISM PSPF relevant security policy frameworks and CSAA methodology templates and guidance.

Perform security assessments using Operational Effectiveness Reviews (OER) and Design Effectiveness Reviews (DER) where justified.

Audit the effectiveness of system security controls implemented across client capability systems.

Develop and deliver assessment artefacts including Security Assessment Reports ATO briefs risk statements and recommended remediation actions.

Identify analyse evaluate and escalate cyber security and business risks.

Assess vulnerabilities associated with security exceptions software defects architecture weaknesses and design weaknesses.

Assess system security architecture and services using structured threat modelling methodologies.

Review security documentation policies and procedures to confirm alignment with Australian Government and client requirements.

Support configuration governance and change control activities with assessment input risks mitigations and options for decision makers.

Provide cyber security advice within the defined assessor scope and support stakeholders in understanding and mitigating cyber risks impacting capability delivery and operations.

Build and maintain effective relationships with sustainment teams OEMs operational stakeholders and security stakeholders.

Requirements

Mandatory Skills and Experience

Qualifications and/or professional experience suitable for eligibility to obtain cyber security assessor endorsement / CSAA endorsement.

Relevant certifications or equivalent experience such as CISSP CISM ISO 27001 Lead Auditor IRAP or related cyber assurance credentials.

Knowledge or experience with radio and satellite communication systems/applications secure communications or secure government-specific systems/applications.

Understanding of modern networking computers operating systems ICT architectures and cyber/security governance.

Ability to work effectively in a team and manage competing priorities in a complex environment.

Demonstrated ability to produce high-quality technical reports risk statements assurance documentation and stakeholder-ready advice.

Highly Regarded Experience

Specialist cybersecurity experience within communications environments including radio satellite or tactical/operational communications.

Strong understanding of ICT architectures networks platforms cyber compliance and governance in secure or regulated environments.

Understanding of C4 secure communications or mission-critical capability systems.

Previous experience in secure government military capability delivery sustainment or complex regulated environments.

Experience assessing and evaluating risk including business risk technical risk and cyber risk.

Ability to apply creative and innovative solutions for stakeholder and customer outcomes.