Cyber Security Architect
Cyber Security Architect in Downer's Group Technology (Security Engineering & Platforms) team, providing security architecture advice and design reviews across applications, cloud, platforms, infrastructure and data. Focuses on secure-by-design patterns, governance and controls aligned to NIST, ISO/IEC 27001 and ASD Essential Eight.
- Compensation
- Not disclosed
- Location
- North Ryde, NSW, Australia
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 7+ years
- Category
- Security
- Posted
Skills
Must have
- Bachelor's degree in cyber security, computer science, IT, MIS or equivalent practical experience
- 7+ years commercial experience in IT or cyber security, with relevant experience in the role domain
- Working knowledge of NIST standards, ISO/IEC 27001, ASD Essential Eight and cyber security controls
- Experience delivering cyber security architecture advice in complex enterprise environments
- Experience reviewing solution designs, architecture artefacts, technical changes and security exceptions
- Experience with application, cloud, data, identity, endpoint and infrastructure security controls
- Experience translating threat, vulnerability and control information into architecture requirements
- Experience influencing stakeholders and suppliers to adopt secure-by-design outcomes
Nice to have
- Professional certifications such as CISSP, CISM, CISA, CRISC, CompTIA Security+ or equivalent
- ITIL Foundation or equivalent service management experience
- Security architecture, cloud security, application security or enterprise architecture certifications
Full description
We are excited to introduce an opportunity for an experienced and strategic Cyber Security Architect to join Downer’s Group Technology function within our Security Engineering & Platforms team.
Reporting to the Application Security Manager, this role is suited to a highly capable cyber security professional who can design, review and guide secure technology solutions across complex enterprise environments.
You will play a key role in embedding secure-by-design principles across applications, cloud services, platforms, infrastructure and data environments. Working closely with Cyber Security, Enterprise Architecture, Technology, Risk, business stakeholders and strategic partners, you will ensure technology solutions align with Downer’s cyber strategy, security policies, architecture principles and risk appetite.
Operating within a product-led DevOps technology model, you will support teams across the full technology lifecycle, from strategy and technical design through to build, release and run.
This role can be based in our Sydney (North Ryde), Melbourne (Collins Street) or Brisbane (Milton) offices.
About the Role
In this role, you will:
- Provide cyber security architecture advice across applications, platforms, cloud services, infrastructure and data environments.
- Review solution designs, architecture artefacts, technology changes and project documentation to identify security risks and control requirements.
- Define reusable security architecture patterns, guardrails, standards and design principles that enable secure-by-design delivery.
- Translate security requirements, vulnerabilities and threat information into practical design recommendations and remediation actions.
- Work with Enterprise Architecture, Application Security, Cloud, Data, Cyber Defence and Governance, Risk and Compliance teams to align security outcomes.
- Provide security input into risk assessments, control exceptions, remediation plans and technology risk decisions.
- Support architects, delivery teams and strategic partners to implement practical and sustainable security controls.
- Contribute to architecture governance forums, security standards, design reviews and cyber security reporting.
- Build cyber security capability through knowledge sharing, coaching and clear technical guidance.
- Communicate technical control gaps and security risks clearly to both technical and non-technical stakeholders.
This is a highly influential role where you will help shape secure technology outcomes while balancing cyber security, operational continuity, cost and business impact.
Our Ideal Candidate
You are an experienced Cyber Security Architect with strong technical judgement and the ability to assess complex technology designs through a risk-based lens.