Air6500 Information Security Lead

SA, Mawson Lakes
- Security
- 17558BR

**About us**:

- At Lockheed Martin Australia, we believe that when people are empowered, inspired, and supported, they can achieve extraordinary things. We embrace flexibility, so our people can be their best inside and outside of work. We champion inclusion and continuous learning, ensuring all voices are heard and valued. And we thrive on collaboration, turning challenges into opportunities for growth and innovation. As a leader in national security, our innovative and diverse programs create a more secure future for Australia across space, air, land, sea, and cyber domains. Every day is a chance to solve the world's most complex challenges and make a profound impact. Experience it here.

**About the program**
AIR6500 is the RAAF's $3 billion program to develop a joint air battle management system that builds on the capabilities offered by Next Generation sensor and command and control systems. AIR6500 will create a fully networked 'system of systems' that synchronises air and missile defence operations in joint and coalition environments, maximising situational awareness and enhancing the speed of decision making across the battlespace.

**Your responsibilities will include**:

- The Information Security Lead will be responsible for the management of information security on AIR6500 and in accordance with the Protective Security Policy Framework (PSPF), Defence Security Principles Framework (DSPF) and Information Security Manual (ISM). This is an internal role within the program to deliver Information Security advice to the AIR6500 Program. Key deliverables for this role will include:

- Maintain our security monitoring program to support the ongoing secure delivery and operation of the AIR6500 program and compliance of its systems in accordance with Defence security policy.
- Support all contractual security requirements for the AIR6500 program, provide support in managing the quality, schedule and cost expectations associated with program development and execution.
- Providing support to the Commonwealth of Australia (CoA), Lockheed Martin's internal and external stakeholders, Program Directors/Managers and functional and integrated product teams
- Advise appropriate senior leadership and stakeholders (including program managers) of known changes affecting accreditation and authorisation boundaries
- Provide security governance across the program
- Perform cybersecurity risk assessments and risk management
- Develop, maintain and continuously improve program security processes and procedures
- Application and guidance for program adherence to the Security Classification and Categorisation Guide (SCCG)
- Assist in Cyber and Data Incident management activities including containment, reporting and remediation
- Assist in collecting and maintaining data needed to meet information security reporting
- Assist in the implementation of security improvement actions and risk mitigations and ensure they are evaluated and validated
- Assist in ensuring procedures and guidelines comply with security policies and ISM
- Assist in ensuring information security requirements are integrated into the continuity planning for LMA systems
- Development or modification of information security program plans and requirements
- Provide security domain expertise and assist with the co-ordination of Program assigned security tasks to ensure security services are of the highest quality and satisfy all regulatory, commercial and technical requirements.
- Assist programs and Protective and Cyber security staff to develop, implement and maintain Security Plans that specify the approach, responsibilities and resources applied to managing security risks, include reporting requirements.
- Ensure that LMA processes adhere to any provisions concerning the security of people, information and assets contained in international agreements and arrangements to which Australia is a party.

**About you**:

- Experience working with Special Access Programs (SAP)
- Extensive Experience in interpretating and performing against Security Classification Categorisation Guides (SCCG) and Information Security Manual (ISM).
- Understanding and experience in US International Trafficking in Arms Regulations (ITAR), Australian Export/Import rules and French Export/Import rules.
- CoA Information Technology Security/Cyber Training
- Equivalent Industry Security Training or Qualifications
- Experience working within highly classified defence security program environments and facilities

**Desirable**
- COMSEC Awareness Brief
- COMSEC CAM Training
- COMSEC Cryptographic Brief (ASD approved)
- Experience with DevSecOps and Continuous Authority to Operate (CATO)
- Experience with Cross Domain Solutions (CDS) and Data Diodes

**Special Requirements**:

- Applicants must be eligible to obtain and maintain an Australian Defence Security Clearance and employment may be contingent on the provision of further personal information in