Cyber Security Consultant

About the Role and Organization

KBR is a global provider of science, technology, and engineering solutions, serving governments and companies across more than 80 countries with a workforce of approximately 38,000 employees. In Australia, KBR has over 65 years of experience delivering critical infrastructure and national security projects, with around 2,000 employees dedicated to innovative technology and engineering services for a secure and sustainable future.

Position Overview

The Cyber Security Consultant role is based in Canberra and is part of the Land C4 Systems Branch within the Communications Delivery Team. This position supports the Australian Defence Force's next-generation Command, Control, Communications and Computing (C4) capabilities by ensuring secure, resilient, and compliant systems within a dynamic Defence environment.

Key Responsibilities

• Perform cyber security assessments and authorisation activities in accordance with ISM, PSPF, and Defence frameworks.
• Execute Operational and Design Effectiveness Reviews to evaluate system security postures.
• Audit and assess the effectiveness of existing security controls.
• Prepare essential documentation such as Security Assessment Reports (SARs), Authority to Operate (ATO) briefs, and risk assessments.
• Identify, evaluate, and manage cyber security risks and vulnerabilities in complex systems.
• Analyze security exceptions, defects, and architectural weaknesses.
• Conduct threat modeling and assess system security architecture comprehensively.
• Help safeguard system confidentiality, integrity, and availability.
• Participate in governance activities including Change Control Boards.
• Review and ensure documentation, policies, and procedures comply with Defence and government standards.
• Maintain ongoing compliance with mandated cybersecurity policies and standards.
• Provide guidance to stakeholders on understanding and mitigating cyber risks.

Candidate Requirements

• Possession of relevant cyber security certifications or equivalent experience, such as CISSP, CISM, IRAP, or ISO 27001.
• Extensive experience in cyber security assessment, risk management, and regulatory compliance.
• Familiarity with Defence security frameworks including the Information Security Manual (ISM) and Protective Security Policy Framework (PSPF).
• Experience working within complex ICT or communications systems environments, with radio and satellite system experience highly regarded.
• Strong knowledge of networks, systems architecture, and security control implementation.
• Capability to create clear, detailed, and high-quality technical reports and documentation.
• Background in Defence, particularly within CASG or the Army, is advantageous.
• Experience with Land C4 systems or similar integrated military capabilities.
• Demonstrated ability in cyber risk assessment for large-scale or mission-critical environments.
• Eligibility requirements include Australian citizenship and minimum AGSVA NV1 Security Clearance.

What We Offer

• Inclusive workplace culture recognized as a Great Place To Work.
• Flexible working arrangements to support work-life balance.
• Competitive compensation package with annual salary reviews.
• Paid parental leave to support families.
• Income protection benefits.
• Corporate reward programs and salary packaging options like Novated leasing.
• Employee stock purchase plans.
• Health and wellness initiatives including flu vaccinations, skin health checks, and discounts on private health insurance.
• Opportunities for career advancement through online learning, mentorship, and defined career pathways.

Additional Information

Applicants must be able to obtain an AGSVA security clearance and comply with International Traffic in Arms Regulations (ITAR) due to the nature of the work with the Australian Defence Force. Hiring decisions prioritize candidate strengths and relevant experience. KBR Australia does not accept unsolicited resumes from agencies without direct engagement.