Cyber Security Assurance Engineer
Core
Provide technical assurance of systems and security controls, translating security requirements into implementable controls and maintaining governance artefacts.
Role type
Cyber Security Assurance Engineer
Builds
Security controls, governance documentation, and risk registers for protected and sensitive environments.
Domain
Defence/Government security, heavy engineering, and infrastructure.
Required skills
Cyber security assurance, ISM, Essential Eight, PSPF, DSPF, identity and network security, architecture review, risk assessment, vulnerability management, third-party security assessment
Preferred skills
CISSP, CISM, CRISC, ISO 27001 Lead Auditor, DISP, IRAP
Technologies
ISM, Essential Eight, PSPF, DSPF, DISP, IRAP
Responsibilities
Interpret ISM, Essential Eight, PSPF and DSPF into practical controls; Design and implement controls for PROTECTED and sensitive environments; Maintain mappings between components, controls, owners and evidence; Assess control design and effectiveness across identity and networks; Review architectures and system changes to identify security gaps; Collect and validate technical evidence for DISP and IRAP; Conduct technical security risk assessments and remediation processes; Track control deficiencies and report on risk and progress; Support vulnerability, patching, hardening and control monitoring; Assess third-party and supply chain systems within security boundaries
Seniority
Mid-level, hands-on IC