Senior ICT Security Specialist

Job description
Senior ICT Security Specialist RFQ ID: LH-01720 ASD 2025

These opportunities do not have the ability to obtain sponsorship for a security clearance (including applicants who currently hold a security clearance seeking to upgrade).

Due to the nature of clients we work with here at Kinexus and the projects these roles will be based on, an Australian Government Top Secret Positive Vetting (TSPV) clearance is essential.

About This Role

ICT Security Specialists implement, manage and retire the infrastructure (including physical, virtual, networking and cloud infrastructure) that supports digital services. They also undertake complex technical assessment activities to ensure capabilities adhere to required security standards.

Estimated start date: Tuesday, 01 July 2025

Initial contract duration: Up to 18 months

Extension term: 12 months

Number of extensions: 2

Experience level: Senior - APS6 equivalent

Location of work: Canberra, Brisbane, Melbourne, Perth

Working arrangements: Onsite. Onsite 5 days a week. Candidates must be willing to undergo ASD's Organisational Suitability Assessment (OSA) prior to engagement.

Maximum hours: 40 hours per week

Security clearance: Positive Vetting

About The Company

Australian Signals Directorate (ASD) is the federal agency responsible for foreign signals intelligence, cyber warfare and information security. ASD's purpose is to defend Australia from global threats and help advance our national interests.

Situated in Canberra, ASD employs over 2000 TSPV cleared workers. ASD's workforce is growing rapidly. Areas of growth include PMO, cyber security, systems administration and engineering, software development and network engineering.A top-security, complex and highly technical environment, ASD plays a vital role in the defence of Australia. Long contracts (12 months+) available.

Job Duties And Responsibilities

Accountable to conduct security risk assessments and provide advice and guidance on the application and operation of procedural security controls.Responsible for ensuring that all identified breaches in information security are promptly managed according to the Australian Signals Directorate policies and procedures.Understand the security features and capabilities of current Australian Signals Directorate and industry accepted hardware and software products and provide advice to stakeholders.Use experience to explain systems security and the strengths and weaknesses that are relevant across the Australian Signals Directorate.Tailor communication style and language to provide guidance on security strategies to manage identified risks.Facilitate appropriate direction for the team by clearly communicating goals and objectives.Interpret security policy and contribute to the development of standards and guidelines that comply with the Australian Signals Directorate policy and procedures.Analyse and resolve identified security incidents in accordance with established procedures and recommend any required actions.Lead the application and compliance of security operations procedures and review information systems for actual or potential breaches in security.Build and sustain effective working relationships with team members and actively participate in teamwork and group activities.

Skills Experience Needed

SCAD 3 - Security operations: Level 3 (SFIA) Investigates minor security breaches in accordance with established procedures. Assists users in defining their access rights and privileges. Performs non-standard operational security tasks. Resolves security events and operational security issues.SCAD 4 - Security operations: Level 4 (SFIA) Maintains operational security processes and checks that all requests for support are dealt with according to agreed procedures. Provides advice on defining access rights and the application and operation of elementary physical, procedural and technical security controls. Investigates security breaches in accordance with established procedures and recommends required actions. Provides support and checks that corrective actions are implemented.SCTY 4 - Information security: Level 4 (SFIA) Provides guidance on the application and operation of elementary physical, procedural and technical security controls. Explains the purpose of security controls and performs security risk and business impact analysis for medium complexity information systems. Identifies risks that arise from potential technical solution architectures. Designs alternate solutions or countermeasures and ensures they mitigate identified risks. Investigates suspected attacks and supports security incident management.INAS 4 - Information assurance: Level 4 (SFIA) Performs technical assessments and/or accreditation of complex or higher-risk information systems. Identifies risk mitigation measures required in addition to the standard organisation or domain measures. Establishes the requirement for accreditation evidence from delivery partners and communicates accreditation requirements to stakeholders. Contributes to planning and organisation of information assurance and accreditation activities. Contributes to development of and implementation of information assurance processes.

Benefits

Why work for ASD? Read more