Lead Cyber Security Architect – NV1

About the Role

We are looking for a seasoned Lead Cyber Security Architect to lead strategic security architecture initiatives within a sophisticated Federal Government ICT environment in Canberra. The successful candidate will guide the assessment, design, and validation of secure technology solutions, enhancing the enterprise's cybersecurity posture and ensuring security is integrated by design in technology investments and digital transformation projects.

Key Responsibilities

• Oversee security architecture and assurance on complex ICT projects and transformation efforts.
• Provide expert architectural guidance across cloud, infrastructure, applications, data, identity, and system integration domains.
• Develop future-state security architectures, roadmaps, reference models, standards, and reusable security frameworks.
• Proactively identify and mitigate cybersecurity risks throughout the full lifecycle of solutions.
• Perform security architecture reviews, risk evaluations, and design assurance checks.
• Implement secure-by-design and Zero Trust principles into enterprise-wide solutions.
• Lead security architecture activities within hybrid and multi-cloud infrastructures.
• Collaborate closely with Enterprise Architects, Solution Architects, cybersecurity teams, and delivery groups.
• Ensure all solutions comply with Australian Government security policies including ISM, PSPF, Essential Eight, and IRAP.
• Contribute to cybersecurity strategies, uplift programs, and continuous improvements to enterprise security maturity.
• Provide trusted, pragmatic security advice to senior stakeholders across technology, security, and business sectors.

Required Qualifications and Experience

• Proven experience as a Security Architect, Lead Security Architect, or Enterprise Security Architect, especially in complex enterprise settings.
• Strong background in designing and validating secure solutions in large-scale environments.
• Comprehensive understanding of cloud security, Identity and Access Management (IAM), cyber risk management, and enterprise security architecture methodologies.
• Hands-on experience with multi-cloud and hybrid cloud platforms, particularly Azure and/or AWS.
• Solid grasp of Zero Trust Architecture and secure-by-design security concepts.
• Track record in enhancing organizational cybersecurity posture and maturity levels.
• Excellent stakeholder engagement skills with the ability to provide practical, senior-level security guidance.
• Experience working within Australian Government or similarly regulated enterprises is highly advantageous.

Additional Desirable Skills

• In-depth knowledge of security frameworks and standards such as ISM, PSPF, Essential Eight, and IRAP.
• Experience in crafting enterprise-wide security strategies, roadmaps, standards, and reference architectures.
• Familiarity with enterprise architecture frameworks such as TOGAF.
• Relevant certifications including SABSA, CISSP, CCSP, Azure Security Engineer, AWS Security Specialty, and/or TOGAF are preferred.