Senior Cyber Security Risk Management Specialist

Senior Cyber Security Risk Management Specialist

Location: ACT, VIC, SA

Clearance: NV1 (minimum), NV2 preferred.

Contract Opportunity

About the Role
Cleared Recruitment is currently seeking a Senior Cyber Security Risk Management Specialist to join a innovative defence organisation. As a key member of the Group Cyber Security Risk Team, you will play a pivotal role in managing and enhancing the cyber security posture of research networks and systems. You will work collaboratively with internal teams and external stakeholders to ensure compliance with Defence standards, policies, and regulations.
In this role, you will contribute to the implementation and monitoring of cyber security controls, providing risk management advice across various projects. You will also engage with senior leadership to prepare system authorisation briefs and ensure ongoing compliance with ISO 27001 standards.

Key Responsibilities:

• Provide cyber security risk advice for large investment portfolios and customer-driven research projects, focusing on the prioritisation and implementation of appropriate cyber controls.
• Review and enhance cybersecurity documentation for networks and systems.
• Offer expert advice on improving cybersecurity controls necessary for system authorisation to operate.
• Prepare and revise briefing materials and reports on cybersecurity matters for senior leadership.
• Contribute to curating and maintaining the Information Security Management System (ISMS) documentation to ensure ISO 27001 compliance.
• Assist in internal audit functions to support certification against the ISO 27001 standard.
• Conduct system vulnerability analysis, reporting, and audits to improve the overall cybersecurity posture.

Skills and Experience:

• Minimum of 3 years' demonstrated experience in Governance, Risk, and Compliance (GRC) within a Defence or research environment.
• Proven knowledge of cybersecurity frameworks and regulations, including ISM, PSPF, Essential 8, and NIST.
• Strong communication skills, with the ability to articulate complex technical concepts to both technical and non-technical stakeholders.
• Experience in preparing detailed risk assessments and audit reports for senior management.

Qualifications (preferred but not essential):

• Industry certifications such as IRAP, CompTIA Security+, CISSP, CISA, CISM, or SSCP.

How to Apply
Please submit your application by Monday 23rd September 2024. For more information or to discuss the role, please contact Paige Wilson from Cleared Recruitment.

Apply today and be part of a cutting-edge team!