Cyber Security Architect

The EL1 Senior Cyber Security Architect is a senior specialist position required to undertake work that is very complex, sensitive and performed under broad management direction. The position sits within the Agency Cyber Security Branch. It exercises a considerable degree of independence as the Agency’s principal design authority for cyber security strategy and architecture and reports directly to the Director of Cyber Solutions. Key duties and responsibilities The position is a leading contributor to the development of the Agency’s cyber security strategy and roadmap, as well as maintaining and championing it. It is responsible for defining and governing the target state cyber security architecture for the Agency’s ICT systems and services. This includes the Agency corporate environment and the national digital health infrastructure the Agency operates on behalf of all Australians. The role acts as the Agency’s cyber security design authority, setting the architectural principles, patterns and standards applied across Agency projects and solutions, and providing the authoritative cyber security voice in enterprise architecture and design governance forums. The role leads the Agency’s assessment of emerging technologies and evolving threats, including areas such as artificial intelligence, post quantum cryptography and cryptographic agility, and sovereign and cloud-based service delivery models. The role then translates these into strategy, policy positions and architectural direction. It provides principal level advice to Branch, Division and Agency executives on complex, sensitive and novel cyber security matters affecting the Agency and the broader Australian digital health ecosystem. The position works in close partnership with the Manager Cyber Security Architecture, who operationalises and resources the Agency’s cyber strategy, roadmap and architectural direction through the Cyber Security Architecture team’s work plans, project engagements and assurance activities. Relevant duties Leadership and Accountability Develop, maintain and champion the Agency’s cyber security strategy and roadmap, recommending strategic directions for cyber security, considering wider Agency and national digital health ecosystem implications, and providing a significant contribution to innovation and business improvement strategies. Act as the Agency’s design authority for cyber security architecture, defining and governing the target state architecture, architectural principles, patterns and standards applied across Agency IT systems and solutions. Provide authoritative, senior level advice to Branch, Division and Agency executives on complex, sensitive and emerging cyber security matters, including the security implications of new and evolving technologies for internal and external stakeholders. Lead horizon scanning and structured assessment of emerging technologies and threat developments (such as including artificial intelligence, post-quantum cryptography and evolving service delivery models) and translate findings into Agency strategy, policy positions and architectural direction. Ensure the Agency’s cyber security strategy and architecture maintain alignment with federal government security frameworks including the Information Security Manual (ISM), Protective Security Policy Framework (PSPF), Essential Eight Maturity Model, and whole-of-government digital and cyber security directions. Engage with risk at a strategic level, including leading threat and risk assessments for novel and emerging technologies and recommending appropriate risk treatments and security controls. Management Diversity and Span Operate as a senior individual specialist without direct reports, exercising influence through recognised technical authority, and providing technical leadership and mentoring to cyber security and architecture practitioners across the Cyber Security Branch. Lead and coordinate complex, multi-disciplinary strategy and architecture engagements spanning Agency divisions, delivery partners and managed service providers, ensuring coherent architectural outcomes across concurrent initiatives. Define and maintain the architectural standards, reference models and design patterns used by the Cyber Security Architecture team and support the Manager Cyber Security Architecture in the quality assurance of architectural outputs against those standards. Job Context and Environment Undertake cyber security strategy and architecture activities with an awareness of their possible impact on strategic, political, or operational outcomes for the Agency and the Australian healthcare ecosystem, especially with respect to the security risk exposure of national digital health infrastructure. Attain and maintain an extensive understanding of the role and responsibilities of the Agency, the national digital health landscape, and the APS operating environment more broadly, including whole-of-government cyber security and digital policy settings. Work within established legislative and policy frameworks including the PSPF and ISM. Independence and decision-making Work with a considerable degree of independence, under broad direction, resolving novel and ambiguous problems where limited precedent exists and delivering quality outcomes in cyber security strategy and architecture. Responsible to communicate and make decisions with a high level of impact on the security of Agency IT systems and the potential to impact more broadly on Agency operations and the Australian healthcare ecosystem, including cyber security architectural positions that influence Agency wide investment and technology direction. Communicate and make decisions that are based on professional judgement, evaluating security risks, emerging threats and potential applicable security controls for Agency IT systems, and providing authoritative positions where stakeholder views diverge. Stakeholder Management Engage and collaborate with Agency enterprise and solution architects, product owners and delivery teams to embed the cyber security strategy and target state architecture from early design through to implementation. Represent the Agency’s cyber security strategy and architecture positions in engagement with other government agencies, including national security and cyber security authorities, health jurisdictions, standards bodies and industry partners, as required. Develop and manage stakeholders through change, resolving conflict, managing sensitivities and negotiating architectural positions with senior internal and external stakeholders. To be eligible for this role, candidates must be Australian Citizens, pass a Police Check and be able to obtain and maintain a security clearance.  Candidates assessed as suitable for the role but not offered the position for the current vacancy, may be placed in a merit list.  Criteria The buyer has specified that each candidate must provide a response to each criterion. Each response is limited to 3000 characters. Essential criteria 1. Demonstrated compliance/alignment with the Statement of Requirement 2. Relevant education and qualifications 3. Demonstrated experience in providing cyber security assurance and advice through the planning and development lifecycle of a cloud based government system (or equivalent) in alignment with federal government security frameworks including the Information Security Manual (ISM), Protective Security Policy Framework (PSPF), Essential Eight Maturity Model, and whole-of-government digital and cyber security directions. 4. Demonstrated experience in the application of cyber security architectural standards, reference models and design patterns for modern enterprise IT systems and in the quality assurance of outputs against those standards. Opportunity summary Sellers can submit Up to 4 candidates Number of sellers invited Between 5 and 10 Number of candidates submitted Fewer than 10 Send us feedback About Accessibility Privacy Terms of use Disclaimer and copyright An initiative of the Digital Transformation Agency The Australian Government acknowledges the Traditional Owners of Country throughout Australia and acknowledges their continuing connection to land, waters and community. We pay our respects to the people, the cultures and the Elders past and present. © Commonwealth of Australia