• Conduct comprehensive risk assessments across IT systems, applications, and third-party vendors.
• Evaluate and monitor compliance with Australian Government requirements such as the PSPF, ISM, and Essential Eight, and apply additional oversights from international frameworks such as ISO 27001, NIST, and GDPR.
• Develop and maintain cyber security policies, standards, and procedures.
• Perform gap analyses and recommend remediation strategies.
• Collaborate with internal stakeholders to ensure alignment with security governance objectives.
• Support audits and certification processes (e.g., IRAP assessments).
• Monitor and report on the effectiveness of security controls.
• Stay current with emerging threats, technologies, and regulatory changes.

• Experience in authoring ICT system authorisation documentation including but not limited to: Security Risk Management Plans (SRMPs), System Security Plans (SSPs), and Standard Operating Procedures (SOPs).
• Experience in technical ICT areas such as system administration, software development, and cloud computing.
• In-depth knowledge of Australian Government cyber security standards, such as the Protective Security Policy Framework (PSPF) and Information Security Manual (ISM).
• Familiarity with one or more: AWS, Azure, Kubernetes, Identity and Access Management.

At Randstad Digital, we are passionate about providing equal employment opportunities and embracing diversity to the benefit of all. We actively encourage applications from any background.