EL1 AIControls Engineer Cyber Security

Australian Citizens residing in Australia only respond.

The Cyber Sustainment Section within the Cyber Security Cloud and Networks Branch of DFATs Information Management and Technology Division has a requirement for an ICT labour hire resource to fill the role of Artificial Intelligence Cyber Security and Controls Engineer.

The successful candidate will be responsible for leading the strategic application of AI and relevant security controls in cyber security. This role will provide expert systems guidance on AI threat detection risk mitigation and policy development ensuring the department remains resilient against emerging digital threats. The increasing sophistication of cyber threats poses a significant risk to national security critical infrastructure and public trust. As AI technologies rapidly evolve they offer both new opportunities and new challenges in the cyber security landscape.

The ideal candidate is a high-level operations technical expert with a deep understanding of both AI and cyber security. They possess a strong track record of applying security controls related to AI for real-world security challenges particularly within complex or high-risk environments. With excellent communication and stakeholder engagement skills they can bridge the gap between technical teams architects and policy makers translating advanced concepts into actionable controls within DFATs ICT Enterprise environment. They are proactive ethically minded and committed to safeguarding national interests through innovative secure and responsible AI deployment. Experience in government or critical infrastructure sectors along with relevant certifications and postgraduate qualifications is highly desirable.

Job Specific role description:

AI Governance and Controls

• Act as the AI Cyber Security Lead in the development implementation and continuous improvement of AI governance frameworks.
• Support the AI Accountable Authority through the development and implementation of AI strategies to enhance cyber security capabilities across the department
• Design and implement AI control frameworks aligned to cyber security privacy risk and compliance requirements.
• Develop security standards and procedures governing the use of AI technologies across the department.
• Assess AI solutions against security privacy ethical and legislative requirements.
• Establish processes model for accountability transparency monitoring and assurance as it relates to AI
• Conduct research and horizon scanning to identify emerging AI trends and their implications for cyber security.

AI Risk Management

• Conduct AI risk assessments and identify appropriate mitigations.
• Evaluate AI use cases and provide recommendations on secure and responsible deployment.
• Monitor emerging AI threats such as data leakage prompt injection model manipulation and unauthorised AI usage etc.
• Support the management of AI-related risks within the departments broader cyber security risk framework.

Microsoft AI and Data Protection Controls

Design document implement and maintain AI-related controls within Microsoft 365 and associated platforms. Configure and manage items such as:

• Microsoft Purview Data Security Posture Management (DSPM) for AI
• Microsoft Purview DLP
• Sensitivity Labels
• Information Protection
• Insider Risk Management
• Communication Compliance
• Microsoft Defender for Cloud Apps
• Copilot governance and data access controls

The Skills Framework for the Information Age (SFIA) has been used to inform the summary DFAT seeks suitable candidates with the following relevant skillsets:

Skills/Levels:

• AI Assurance / AI Governance - AI Governance and Assurance - Governance (GOVN) - Level 4
• AI Assurance / AI Governance - AI Engineering / Operations - Security Operations (SCAD) - Level 4
• AI Assurance / AI Governance - AI Change Enablement - Organisational Design and Enablement (ORDI) - Level 4
• AI Assurance / AI Governance - Independent AI Audit and Oversight - Information and Data Compliance (PEDP) - Level 4

Understanding of AI governance cloud computing environments and secure data handling practices. / Certifications such as CISM SC-100 SC-401 SC-500 MS-102 or equivalent are highly desirable.

The Cyber Sustainment Tools (CST) is a part of the Cyber Security Cloud & Networks Branch (CAS/CRB/IMD). CST is responsible for several core functions relating to providing a hardened and secure environment utilising technology to safeguard DFATs ICT environment.

The buyer has specified that each candidate must provide a one page pitch to address all criteria specified. This is equal to 5000 characters.

• 1. Experience in AI governance technology risk cyber security governance or information security.
• 2. Experience implementing cyber security and compliance controls within Microsoft 365.
• 3. Experience with implementing Microsoft Purview DLP information protection technologies as it related to AI Governance.
• 4. Excellent stakeholder engagement skills including collaboration with technical teams policy makers and external partners.
• 5. Demonstrated understanding of AI governance frameworks responsible AI principles privacy and data protection requirements risk management methodologies and cyber security controls.
• 6. Familiarity with Australian Government frameworks such as PSPF ISM and Essential 8 along with international frameworks such as NIST.