Cyber Security Architect

*Acknowledgement of Country*
CSIRO acknowledges the Traditional Owners of the land, sea and waters, of the area that we live and work on across Australia. We acknowledge their continuing connection to their culture and pay our respects to their Elders past and present. View our vision towards reconciliation

*Child safety*
CSIRO is committed to the safety and wellbeing of all children and young people involved in our activities and programs. View our Child Safe Policy .

*The opportunity*

• Protect CSIRO's critical digital assets through expert security architecture
• Embed cyber resilience into tech solutions
• Deliver practical, high-quality solutions in a complex environment

As the Cyber Security Architect, you'll be joining CISRO's Cyber Security Resilience team. Where you will provide expert security architecture and advisory support to help protect CSIRO's digital assets and reputation.

Working closely with various teams, you'll guide the secure design and implementation of solutions, integrate security controls, and embed cyber security practices into day-to-day processes. Ideally you will bring cross-industry experience, strong analytical skills, and a collaborative approach to delivering practical, high-quality outcomes.

This role is suited to a self-driven professional who can operate effectively in a complex environment while managing multiple priorities.

*Your duties will include:*

• Provide general security guidance (e.g., initial discussions to support security activity project planning) across the cyber security architecture and assurance domains.
• Contribute to developing security business requirements aligned with CSIRO security objectives.
• Perform cyber security architecture activities to ensure that business security requirements are integrated into IMT initiatives and projects.
• Collaborate with solution architects, project team members and other stakeholders to ensure the delivery of secure outcomes.
• Participate in the review and assessment of planned solution security controls to assess their effectiveness and completeness.
• Contribute to conducting security risk assessments to evaluate solution security posture and identify key security risks with potential mitigation recommendations.

Location:
Open to be based from Sydney (Lindfield), Melbourne (Clayton), Canberra (Black Mountain), Brisbane (St Lucia), Hobart (Sandy Bay), Adelaide (Waite)

Salary:
AU$131,113 - AU$153,639 plus up to 15.4% superannuation

Tenure:
Indefinite

Reference:
100122

*To be considered you will need:*

• A diploma or degree in Information Technology (IT) (or related field) or equivalent relevant work experience.
• Demonstrated experience as a Cyber Security Architect, with a track record of successful delivery of Information and Communication Technology (ICT) projects and/or solutions.
• Familiarity with security frameworks and standards, such as the Australian Government Information Security Manual (ISM), Essential Eight (E8), and/or NIST Cyber Security Framework (CSF).
• Proven experience in designing and implementing security solutions for both on-premises and cloud-based environments.
• Demonstrated experience in the development of security requirements and conducting threat modelling, security risk assessments and risk analyses.
• Demonstrated expertise across a variety of ICT technologies to guide and support architecture documentation (e.g. HLSDs, LLDs, etc) employing key cyber security technologies; and
• Ability to multi-task and manage competing priorities.
• Desirable
• Desirable to have experience in supporting multiple complex projects.
• Desirable to have experience with the Protective Security Policy Framework (PSPF).
• Desirable to have experience with Australian Cyber Security Centre (ACSC) security guidance, NIST SP guidelines, and Centre of Internet Security (CIS) benchmarks.
• Desirable to understand the shared responsibility model in the cloud and/or on-premises.
• Desirable to be familiar with Australian legislation including (but not limited to) the Privacy Act 1988 (Cth) and the Archives Act 1983 (Cth); and
• Desirable to have relevant security industry certifications from certification bodies such as ISACA, ISC2, SANS, PECB, SABSA Institute, The Open Group etc.

For full details about this role please review the Position Description

*Eligibility*
This is a security assessed position. Applicants must be an Australian citizen, with successful candidate either holding or having the ability to obtain a Negative Vetting 1 Australian Government security clearance. Appointment to this role is subject to provision of a national police check and may be subject to other security/medical/character requirements.

*Flexible working arrangements*
We work flexibly at CSIRO, offering a range of options for how, when and where you work.

*Diversity and inclusion*
We are working hard to recruit people representing the diversity across our society, and ensure that all our people feel supported to do their best work and feel empowered to let their ideas flourish.

About CSIRO
At CSIRO Australia's national science agency, we solve the greatest challenges through innovative science and technology. We put the safety and wellbeing of our people above all else and earn trust everywhere because we only deal in facts. We collaborate widely and generously and deliver solutions with real impact.

CSIRO is committed to values-based leadership to inspire performance and unlock the potential of our people.

Join us and start creating tomorrow today

*How to apply*
Please apply on-line and provide a cover letter and CV that best demonstrate your motivation and ability to meet the requirements of this role.

*Applications close*
23 September 2025, 11:00pm AEST