Lead Security Engineer

Profectus is seeking an experienced Lead ICT Security Engineer to deliver security engineering and accreditation outcomes for ICT systems within an Australian Government agency. The role leads security assurance activities across new and existing ICT systems and provides security advice to project teams and senior stakeholders. The work covers security risk assessments, security control implementation, accreditation documentation and stakeholder engagement to achieve and maintain Authority to Operate.

Key Responsibilities

• Lead security engineering activities across complex ICT systems and projects
• Implement and assess security controls to achieve and maintain Authority to Operate (ATO)
• Conduct security risk and threat assessments, identify vulnerabilities and develop mitigation strategies
• Develop and maintain accreditation documentation, including System Security Plans (SSPs) and Concepts of Operations (CONOPS)
• Prepare briefs, reports and recommendations for senior management to support approvals
• Negotiate with ICT engineers, security teams and project stakeholders to achieve accreditation approvals
• Provide security engineering advice to project teams through design, implementation and sustainment
• Explain technical security requirements to technical and non-technical audiences

Required Experience

• Demonstrated experience leading security engineering activities for complex ICT systems in secure government or Defence environments
• Proven experience achieving and maintaining ATO or security accreditation for ICT systems
• Experience conducting security risk and threat assessments and documenting residual risk
• Strong experience writing SSPs, CONOPS, risk assessments and executive briefs
• Working knowledge of Australian Government security policy and standards, including the ISM and PSPF
• Ability to engage, influence and negotiate with engineers, accreditation authorities and senior stakeholders
• Excellent written and verbal communication skills

Desirable Experience

• Formal security qualifications such as IRAP Assessor Training, CISSP, CISM, SABSA or ISSEP
• Experience supporting Defence or national security projects
• Experience with security architecture, cloud security, DevSecOps or infrastructure accreditation

Security Clearance Requirements

• Must be an Australian Citizen
• Must have a current AGSVA Top Secret Positive Vetting (TSPV) Security Clearance

Working Arrangements

• Onsite
• Canberra

Why Profectus

Profectus partners with Australian Government agencies to deliver trusted ICT capability across complex delivery programs. We take a long term, relationship driven approach, supporting our people across the full lifecycle of their engagement while contributing to outcomes of national importance.