Senior Consultant Security Assessor

About the Role

We invite you to join a global leader committed to fostering your career growth in a diverse and collaborative environment. As a Senior Consultant Cyber Security Assessor, you will lead Essential Eight maturity assessments and play a pivotal role in assurance engagements for Federal Government, Defence, and regulated sectors. You'll be responsible for comprehensive assessment delivery including evidence gathering, control validation, and drafting findings.

Responsibilities

• Execute Essential Eight assessment tasks end-to-end, from planning to reporting.
• Review documents and conduct onsite validations of security controls.
• Evaluate control designs and their operational effectiveness against maturity models.
• Prepare well-supported findings, summaries of evidence, and actionable remediation advice.
• Interact directly with clients to confirm control implementations.
• Contribute to assessment reports and develop executive-level deliverables.
• Mentor junior team members ensuring quality and consistency in outputs.
• Enhance assessment methodologies and delivery strategies continuously.

Additional Responsibilities - Project & Program Management

• Organize and oversee assigned workstream activities including scheduling and coordinating tasks.
• Monitor progress versus deadlines and flag risks or issues as needed.
• Assist engagement leads with governance and delivery reporting.
• Facilitate coordination among different stakeholders involved in assessments.

Required Skills and Knowledge

• Detailed understanding of the Essential Eight maturity framework and related assessment procedures.
• Strong familiarity with the Information Security Manual (ISM) and Australian Government security guidelines.
• Experience with complementary frameworks such as NIST and ISO 27001.
• Capability to assess technical environments and correlate findings across various frameworks.
• Four to seven years of experience in cybersecurity, risk management, or assurance roles.
• Proven history of delivering or supporting security assessments, preferably in government or regulated industries.
• Background in audit, assurance, or control testing is advantageous.
• Relevant certifications like CISA, CISSP, CISM, or ISO 27001 Auditor are preferred.
• Tertiary qualification in information security, IT, or a related field.

Desired Attributes

• Strong analytical skills with an aptitude for evaluating control efficacy.
• Ability to work autonomously and manage assigned deliverables.
• Confidence in engaging both technical and business stakeholders.
• High standards of professionalism, integrity, and accountability.
• Methodical and results-driven approach to tasks.

Benefits and Culture

• Career development opportunities with access to advanced skill-building experiences.
• Flexible working arrangements designed to support work-life balance.
• A variety of benefits including wellness incentives, additional flexible leave, and family-friendly policies such as up to 26 weeks of gender-neutral paid parental leave.
• Competitive salary negotiable based on expertise and experience.

Inclusivity and Commitment

We honor Indigenous Custodians of the lands where we operate and are dedicated to cultural respect and reconciliation. We welcome applications from individuals of all backgrounds, ages, abilities, and identities. We provide an equitable recruitment process and encourage applicants to request accommodations to participate fully and comfortably.

Additional Information

Employment screening will be conducted for successful candidates by the company or an authorized external firm.