Lead Cyber Security Architect

Overview

We are seeking a seasoned Lead Cyber Security Architect to provide strategic and technical architectural leadership for a significant Cyber Uplift Program. This senior position involves shaping and managing the target-state cyber security architecture across multiple program streams, ensuring alignment with enterprise architecture, government policies, legal requirements, and industry best practices.

Key Responsibilities

• Guide cyber security architecture efforts across several concurrent initiatives within the program.
• Develop and maintain cyber security architecture principles, standards, and reusable design patterns.
• Govern architectural consistency and provide assurance through all project phases.
• Lead architecture through discovery, design, implementation, and operational transition stages.
• Ensure solutions comply with strategic directions, standards, and operational aims.
• Assist delivery teams in transforming architectural guidance into viable technical solutions.
• Align solution architecture with enterprise frameworks, government policy, legislation, and recognized industry standards.
• Offer expert technical advice and leadership to program stakeholders.
• Mentor architects and technical specialists when necessary.
• Effectively communicate complex technical concepts to varied audiences, including technical, business, and executive teams.
• Keep abreast of emerging cyber security trends, technologies, and industry standards.
• Identify and implement improvements in architectural capability, consistency, and maturity.
• Promote reuse of established architecture patterns and standards.
• Lead technical aspects of procurement, technology assessments, and vendor evaluations.
• Support the continuous enhancement of cyber security capabilities and delivery methodology.

Candidate Profile

• Minimum of 10 years’ experience in cyber security architecture and technical leadership roles.
• Proven expertise in managing architecture in complex, large-scale transformation programs.
• Experience crafting enterprise security architectures and capability roadmaps.
• Deep understanding of Australian Government cyber security standards and controls.
• Competence in architecture governance and design validation.
• Ability to operate both strategically and hands-on to assist delivery teams through implementation challenges.
• Track record of influencing senior leaders and providing trusted technical counsel to executives.
• Strong skills in stakeholder engagement, communication, and relationship management.
• Experience in highly regulated environments such as government or comparable sectors.

Technical Expertise and Frameworks

• Familiarity with ASD Information Security Manual (ISM) and Essential Eight strategies.
• Knowledge of NIST Cybersecurity Framework (CSF) version 2.0 and ISO/IEC 27001 standards.
• Experience with SABSA and/or TOGAF enterprise architecture frameworks.
• Hands-on with Microsoft security technologies.
• Proficiency with identity management platforms including Entra ID, Identity Governance and Administration (IGA), and Privileged Access Management (PAM).
• Understanding of Security Information and Event Management (SIEM) and security operations processes.
• Expertise in cloud security platforms, Zero Trust models, Conditional Access, and endpoint security technologies.

Qualifications

• Required: CISSP certification or demonstrably equivalent experience.
• Highly desirable qualifications include SABSA Foundation or Practitioner, TOGAF certification, tertiary degree, ASD Essential Eight Assessor, CRISC, CISM or comparable credentials.

Work Environment

This role is primarily based at Carseldine, Brisbane, with a requirement to work onsite at least 50% of the time. Personnel may be reassigned among projects across Carseldine and Brisbane CBD offices depending on business needs, so flexibility to work from either location is essential.

Application Process

Applicants should clearly articulate how their experience and skills correspond with the job requirements, including examples of cyber security architecture leadership, governance experience, technical expertise, frameworks applied, and relevant certifications. Candidates interested in shaping and leading cyber security architecture within a complex uplift program are encouraged to apply.

Diversity and Accessibility

The employer values diversity and encourages applications from Indigenous Australians, candidates from culturally and linguistically diverse backgrounds, and people with disabilities. Adjustments can be provided during recruitment processes on request.