AI/Controls Engineer Cyber Security

The Cyber Sustainment Section within the Cyber Security, Cloud and Networks Branch of DFAT's Information Management and Technology Division has a requirement for an ICT labour hire resource to fill the role of Artificial Intelligence Cyber Security and Controls Engineer.  The successful candidate will be responsible for leading the strategic application of AI and relevant security controls in cyber security. This role will provide expert systems guidance on AI threat detection, risk mitigation, and policy development, ensuring the department remains resilient against emerging digital threats. The increasing sophistication of cyber threats poses a significant risk to national security, critical infrastructure, and public trust. As AI technologies rapidly evolve, they offer both new opportunities and new challenges in the cyber security landscape. The ideal candidate is a high-level operations technical expert with a deep understanding of both AI and cyber security. They possess a strong track record of applying security controls related to AI for real-world security challenges, particularly within complex or high-risk environments. With excellent communication and stakeholder engagement skills, they can bridge the gap between technical teams, architects and policy makers, translating advanced concepts into actionable controls within DFAT’s ICT Enterprise environment. They are proactive, ethically minded, and committed to safeguarding national interests through innovative, secure, and responsible AI deployment. Experience in government or critical infrastructure sectors, along with relevant certifications and postgraduate qualifications, is highly desirable. Key duties and responsibilities Job Specific role description: AI Governance and Controls Act as the AI Cyber Security Lead in the development, implementation, and continuous improvement of AI governance frameworks.Support the AI Accountable Authority through the development and implementation of AI strategies to enhance cyber security capabilities across the departmentDesign and implement AI control frameworks aligned to cyber security, privacy, risk, and compliance requirements.Develop security standards, and procedures governing the use of AI technologies across the department.Assess AI solutions against security, privacy, ethical, and legislative requirements.Establish processes model for accountability, transparency, monitoring, and assurance as it relates to AIConduct research and horizon scanning to identify emerging AI trends and their implications for cyber security. AI Risk Management Conduct AI risk assessments and identify appropriate mitigations.Evaluate AI use cases and provide recommendations on secure and responsible deployment.Monitor emerging AI threats, such as data leakage, prompt injection, model manipulation, and unauthorised AI usage etc.Support the management of AI-related risks within the department's broader cyber security risk framework. Microsoft AI and Data Protection Controls Design, document, implement and maintain AI-related controls within Microsoft 365 and associated platforms. Configure and manage items such as: Microsoft Purview Data Security Posture Management (DSPM) for AIMicrosoft Purview DLPSensitivity LabelsInformation ProtectionInsider Risk ManagementCommunication ComplianceMicrosoft Defender for Cloud AppsCopilot governance and data access controls The Skills Framework for the Information Age (SFIA) has been used to inform the requirements. In summary, DFAT seeks suitable candidates with the following relevant skillsets: Skills/Levels: AI Assurance / AI Governance - AI Governance and Assurance - Governance (GOVN) - Level 4+AI Assurance / AI Governance - AI Engineering / Operations - Security Operations (SCAD) - Level 4+AI Assurance / AI Governance - AI Change Enablement - Organisational Design and Enablement (ORDI) - Level 4+AI Assurance / AI Governance - Independent AI Audit and Oversight - Information and Data Compliance (PEDP) - Level 4+