Senior Cyber Security Specialist

The Australian Electoral Commission (AEC) is seeking to engage suitably qualified and experienced Cyber Security Specialist to deliver and support a range of ICT projects/programs. The Cyber Security Specialist is expected to have a strong understanding of ICT security policy in government, and a background in large and complex projects is essential. The Security Specialist is responsible for undertaking technically complex work, under limited direction, utilising expertise in IT security analysis and compliance assessment. The Cyber Security Specialist will be responsible for documenting the risks and security controls for current-state and target-state solutions that help drive the modernisation agenda of the AEC. This role will work closely with program architects, solution architects, business analysts, procurement specialists, system integrators, ICT, and vendors to shape and inform the direction of modernisation activities. The Cyber Security Specialist will be expected to develop a firm understanding of the AEC risk appetite, and as such the ability to identify, shape and describe opportunities and risks within the context of business outcomes and business problems will be essential. The Cyber Security Specialist will need to engage and communicate widely across key stakeholder groups, including business, ICT, system integrators and vendors. As such, strong communication and stakeholder engagement skills are essential. We are looking for a Cyber Security Specialist who has a desire to define and deliver real outcomes, is comfortable working with ambiguity and is not held hostage by methodology. We are looking for someone who wants to have an impact and contribute to a program that is making real change. We need people to contribute to our culture and who are committed to making the program a great place to work. We expect to challenge our recruits with new thinking and to be challenged ourselves. Success for this role will rely on the individual’s ability to deliver in a fast paced and highly dynamic environment, a good cultural fit and an ability to challenge and drive thinking in new directions. The candidate must hold an active Baseline security clearance prior to commencement. Key duties and responsibilities This role will be responsible for, but not limited to: Providing high-quality and timely advice, clearly articulating risks, trade-offs, and recommended courses of action to technical and non-technical staff to support informed decision making aligned with ISM and PSPF guidance, AEC Doctrine and Program objectives. Developing and/or reviewing key technical security documentation including, but not limited to: Security Risk Management Plans, System Security Plans, Risk Registers, Incident Response Plans, Security Assessment Reports and Security Impact Assessments. Conducting security reviews and assessments for the Indigo Program, including defining security requirements, assessing current-state security posture and designing and fit-for-purpose target-state security solutions. Contributing to the planning, coordination and delivery of Program outcomes.  Acting as a senior escalation point within the Security Team, supporting Program leadership, and assisting with team workload management, prioritisation, sequencing and capacity building. Contributing to the continuous improvement of Indigo Security processes, artefacts, and ways of working to improve the quality, efficiency and consistency across the program. Supporting effective governance, accountability and knowledge transfer for the team, including the appropriate use of AEC approved tools such as Objective, DevOps, SharePoint. Building and maintaining effective working relationships with the team and stakeholders including ADTs, BAU and vendors to identify opportunities, provide advice and achieve pragmatic outcomes for the Program. Guiding and mentoring junior staff where required. Supporting a positive security culture across the Program by promoting security awareness, good practice and improved security literacy.  Representing the Security Team function in key forums as delegated by the Security Team Lead. Managing assigned work items as per established Ways of Working, and producing and maintaining appropriate documentation as required. Criteria The buyer has specified that each candidate must provide a one page pitch to address all criteria specified. This is equal to 5000 characters. Essential criteria 1. • 5+ years of demonstrated Experience working as a Security Specialist inside complex and large-scale ICT projects/programs within Federal Government or private sector. • Expert knowledge and experience in undertaking ICT security compliance and cyber security risk assessments producing security documentation for both current-state and target-state • Proven ability to deliver information security solutions that meet business requirements and align with risk appetite and compliance obligations. • Strong communication skills, with the ability to translate between business and technical terminology. • Proven ability to communicate with influence, negotiate outcomes and manage complex stakeholder relationships. • Sound working knowledge of Federal Government security policy. • Demonstrated personal drive and integrity whilst achieving results within legislative and budget parameters. 2. To be considered compliant, submissions need to be provided in 1 PDF Document including: Page 1 - a completed copy of the AEC Candidate Submission Guide (emailed to the listed BuyICT contact address upon RFQ publication): • Provide information for the following items: Candidate Name, Position Title, Opportunity ID, Candidate Availability, Location, Citizenship Status, Security Clearance Level, Planned Leave (exceeding 1 week), Additional Engagements, Submitting Consultant. • Choose an item or check the box that applies to the following options: Previous AEC Employee or Contractor, Current AEC Contractor, Code of Conduct, Submission History, Authority to Represent, Submission Compliancy. • Consultant comments may be added (must be limited to the space provided). Page 2 - A one-page pitch addressing the selection criteria. This should not exceed one page. Pages 3 - 5 - A resume of no more than three pages. We will strictly adhere to the above requirements. Submissions will be deemed non-compliant if they do not meet the listed criteria, if they exceed the 5-page limit or if the rates of submitted candidates are included in the PDF. Desirable criteria 1. • Relevant tertiary qualifications in Cyber Security, ICT or a related field. • Professional certifications in ICT security. • Demonstrated knowledge of Commonwealth frameworks, including ICT frameworks. • Previous experience with ASD Essential Eight and ASD ISM. Opportunity summary Sellers can submit Up to 1 candidate Number of sellers invited Fewer than 5 Number of candidates submitted Fewer than 10 RFQ closing time 00 Weeks 05 Days 00 Hours Send us feedback About Accessibility Privacy Terms of use Disclaimer and copyright An initiative of the Digital Transformation Agency The Australian Government acknowledges the Traditional Owners of Country throughout Australia and acknowledges their continuing connection to land, waters and community. We pay our respects to the people, the cultures and the Elders past and present. © Commonwealth of Australia