Security Architect

About the Role : Security Architect – 6 month contract, view to extend

Reporting to the Head of Information Security, the Security Architect plays a strategic role within the Customer Transformation Program. The role involves defining and maintaining the security architecture to ensure all technology and process decisions are secure by design. The Security Architect will ensure the program adheres to enterprise security principles, mitigates risks, and aligns with the organisation's security posture. Key responsibilities include :

• Define and maintain the end-to-end security architecture for the Customer Transformation Program, ensuring alignment with enterprise security standards and risk management frameworks.
• Develop security blueprints and controls frameworks to guide solution teams in making secure design and implementation decisions.
• Establish security governance processes, including design assurance, threat modelling, and compliance with standards.
• Drive secure technology decisions related to identity and access management (IAM), data protection, application security, and secure integration across platforms.
• Act as the security advisor to program and delivery teams, influencing stakeholders to embed security throughout all stages of design and delivery.
• Collaborate with external vendors and partners to ensure solutions meet security standards, policies, and risk controls.

About You :

You have a strong background in securing complex, multi-domain transformation programs. You're confident engaging at all levels, from technical reviews to executive presentations, and are driven to embed scalable security throughout a program. Ideally, your experience includes :

• Extensive experience in senior security architecture roles across large-scale transformation programs, preferably within the Energy or Utilities sector.
• Understanding of customer-related technology domains, including Retail operations (Billing, Credit & Collections), Generation, and Corporate systems (HR, Finance, Procurement).
• Experience with billing platform transformation programs in regulated environments is highly regarded.
• Strong background in designing and implementing secure cloud architectures, ideally with AWS, including best practices for infrastructure and application security.
• In-depth knowledge of data security, privacy-by-design principles, and data protection during system integration and migration activities.
• Proven ability to communicate risk and architecture clearly to technical teams and senior stakeholders.
• Familiarity with relevant legal and regulatory requirements (e.g., SOCI and AESCSF).
• Relevant Security Certifications such as CISSP, CISM, SABSA, TOGAF, etc.

How to Apply :

If you're ready to 'light the way' towards your next career move, click the 'Apply' button to submit a confidential application. For questions, contact Jock Clydesdale, Talent Partner – Technology, at jock.clydesdale@energyaustralia.com.au.

Why Us :

At EnergyAustralia, we are committed to an inclusive culture where employees can bring their whole selves and feel a sense of belonging. Benefits include :

• Hybrid working environment promoting flexibility.
• Excellent, down-to-earth company culture—be authentic and bring your whole self to work.
• State-of-the-art Melbourne office with stunning views, just 3-4 minutes walk from Southern Cross station.
• Onsite Tech Bar.

We support diversity and inclusion through initiatives like PRISM, which fosters a positive culture for LGBTQ+ employees, and our Reconciliation Action Plan, strengthening relationships with Aboriginal and Torres Strait Islander peoples and organisations. Everyone is welcome at EnergyAustralia.