• You can be based in Canberra, Melbourne, Adelaide or Brisbane
• NV1 clearance mandatory requirement
• 12 months +24 months
• Multiple positions available

About the role

Our client within Federal government is seeking for cyber security vulnerability platform professionals with extensive experience in developing and maturing Cyber Vulnerability Management capability. The Vulnerability platform engineer will lead the development of required processes and supporting technologies to mature Cyber Vulnerability Management capability.

Your key duties to include:

• Develop and document relevant processes to mature Vulnerability Management capability.
• Align the Vulnerability management process with the relevant policies.
• Undertake actions to discover, assess, report, act and evaluate cyber vulnerabilities. Prepare detailed reports and presentations for management on vulnerability status.
• Analyse vulnerability findings and prioritize remediation actions.
• Collaborate with IT and development teams to implement security measures. key to delivery of an optimal vulnerability management solution manage the design, installation and operation of the ICT system for vulnerability management and end to end process mapping.
• Provide broad technical support for project build, test and solution deployment activities.
• Configure and manage all non-functional platform capabilities including job scheduling, output management, email, archiving, technical security, technical connectivity between software components.

Selection Criteria:

• Demonstrated experience in vulnerability management platform deployment/management/design for ICT projects within Federal Government.
• Proven experience in developing cyber vulnerabilities management processes and supporting technologies to effectively discover, assess, report, act and evaluate cyber vulnerabilities.

Please contact Deep on 413109712 or email Deepika.ahluwalia@talentinternational.com for more information on how to apply.

• 12 month daily rate contract
• Paying between $950-$1050 per day inc super
• Complete ownership over a CIAM platform within an iconic Australian brand
• Flexible WFH – not fully remote

About the role:

We are seeking a skilled professional to oversee the implementation and management of a Customer Identity and Access Management (CIAM) system. This role involves planning and prioritising CIAM features, ensuring alignment with business goals and data protection laws. The successful candidate will collaborate with IT, security, and customer service teams, manage external vendors, and keep stakeholders informed about CIAM strategies and risks. Additionally, they will monitor system performance, resolve issues, and continuously improve customer experience by tracking metrics and implementing feedback.

Main Tasks:

• Prioritisation and Planning:

  • Ensure the CIAM implementation complies with customer data protection laws and the organisation’s security guidelines.
  • Maintain and prioritise the list of features and improvements for the CIAM system.
  • Approve and plan upcoming CIAM features and improvements, aligning them with business goals, customer needs, and allocated budgets.
  • Create a roadmap for CIAM feature development and release.
  • Track the budget for CIAM-related projects, ensuring timely, effective, and cost-efficient resource allocation.
  • Ensure all implemented features are thoroughly tested before going live.

• Collaboration and Communication:

  • Work with IT, security, marketing, and customer service teams on initiatives related to customer access to applications.
  • Manage external CIAM vendors, ensuring service-level agreements are met and their tools integrate with existing systems.
  • Keep the executive team and stakeholders informed about the overall CIAM strategy, feature implementation, and potential risks.

• Solution Monitoring and Issue Resolution:

  • Regularly monitor metrics such as customer authentication/authorisation rates, risky logins, system performance, and customer satisfaction to ensure the CIAM system meets business expectations.
  • Address feedback from stakeholders and resolve any issues promptly.

• Setting CIAM Product Strategy & Roadmap:

  • Define the identity product strategy, driving business cases to prioritise features that align with business requirements.
  • Lead efforts to align stakeholders on product strategies that enhance customer experience while meeting operational performance and security requirements.
  • Define and monitor key performance indicators (KPIs) for CIAM performance, authentication rates, response times, and fraud impacts.
  • Continuously improve customer experience by analysing performance data and identifying areas for friction in the authentication and authorisation processes.

Required Skills

• Business Expertise:

  • Understanding of CIAM as both a business and security enabler.
  • Knowledge of CIAM’s impact on customer experience, marketing, and customer service.
  • Up-to-date on CIAM trends, technologies, and best practices.

• Strategic Thinking:

  • Ability to align CIAM projects with business strategies and customer engagement goals.
  • Skilled in identifying opportunities to leverage new technologies.
  • Ability to assess and present ROI for CIAM initiatives.

• Project Management and Leadership:

  • Experience creating project plans, setting milestones, and managing timelines.
  • Ability to establish CIAM KPIs to measure system effectiveness.
  • Strong leadership skills, fostering collaboration and motivation within project teams.

• Communication and Negotiations:

  • Effective in managing expectations and negotiating resources, decisions, and trade-offs with stakeholders.
  • Skilled in vendor management, negotiating terms, and addressing risks.

• Analytical and Problem-Solving:

  • Ability to analyse data, metrics, and trends to inform decision-making.

• Technical Expertise:

  • Experience with at least one CIAM platform and knowledge of leading identity protocols and authentication methods.
  • Understanding of how CIAM integrates with digital products.
  • Good grasp of cybersecurity practices and identity-based access control.

• Knowledge of Regulatory Frameworks:

  • Familiarity with GDPR, CCPA, and other data protection laws.

If you are interested in this role please “Apply” below, alternatively you can email your resume to ziomi.warchalowski@talentinternational.com

The Client & Role:
We’re currently working with an Australian utilities organisation, they’re looking to engage a SIEM Specialist in a permanent full-time capacity. As the SIEM Specialist you will be accountable for ensuring their enterprise platforms are being monitored effectively, actively protected against threats & vulnerabilities, and are able to respond and recover from incidents. This includes all aspects of digital technology across the business (including IT and OT) and enterprise business processes. The client operates a hybrid work model with three days per week on-site in their Melbourne office.

Responsibilities:

• Accountable for the performance of the operational services that enable us to successfully protect our organisation and oversee Cyber Defence services providing detect, protect, and response processes and technologies.
• Accountable and responsible for Security Information & Event Monitoring (SIEM), Threat & Vulnerability Management and Cybersecurity Incident Management & Response and outcomes (e.g. Internal Audit remediation).
• Uplifting relevant control domains maturity as measured by National Institute of Standards and Technology (NIST) cybersecurity framework for both IT and OT, the Australian Signals Directorate (ASD) Essential 8, and other frameworks as identified.
• Monitoring the external threat environment and assessing the impact of changes upon the organisation and reflecting those changes in the operational security controls and incident response plans.
• Responsible for development of the detect and response components of the Cyber Security Strategy for Cyber Defence, including a ‘future state’ and a risk-prioritised implementation plan.
• Execute delivery of the Service Roadmap for Cyber Defence and process mapping, supported by with other teams and third parties

Required Skills & Specialisms:

• Tertiary degree in Information Technology, Information Security or equivalent working experience is required.
• Extensive experience and expertise in Security Operations, including gathering threat intelligence, managing a Security Information and Event Management Service, Incident Management & Response, and vulnerability management
• Extensive experience and expertise in technology platform operations and management
• Extensive experience and expertise in multiple operational security platforms
• Security qualifications, accreditations and current certification in, for example, CISSP, CISM, CISA, ISO27001 LA and/or CRISC
• Demonstrated practical experience in one or more of the following: VPDSF, NIST 800-53, ISO 27001, ISO 27002, ISO 31000, and/or PCI DSS
• Highly developed Security Operation management skills.
• Knowledge of MITRE ATTACK framework, NIST standards, and relevant legislation and regulatory authorities.
• Expertise in Security Information & Event Monitoring (SIEM) and Threat Intelligence
• Expertise in enterprise vulnerability management
• Expertise in incident management response and reporting

If you’re a SIEM Specialist looking to take the next step in your career, apply now via the link provided, all questions can be directed to Daniel at daniel.clifford@talentinternational.com or +61 3 9236 7742 following formal application.

• 12 months + 12 month extension
• Minimum NV1 Security Clearance
• Canberra based only
• SPLUNK experience preferred

As an experienced Cyber Security Analyst, you will play a vital role within Cyber Operations where you will undertake defensive cyber operations, ensuring the protection of a global network from malicious actors.

Specifically, you will:

• Analyse security events and logs to identify patterns of potential anomalous activity, recommend security enhancements, and assist in developing countermeasures to prevent future incidents.
• Applying cyber security knowledge and experience in creating cyber security use cases to detect potential anomalous ICT activity.
• Undertaking incident response and remediation functions.
• Provide advice and assistance to relevant parties on cyber operations, potential risks, and mitigation efforts.
• Creating and maintaining technical Playbooks, Standard Operating Procedures and policy documents that relate to cyber security.
• Assisting the production of Cyber Threat Intelligence.

Selection Criteria:

• Experience in Cyber Security Operations or Incident Response.
• Applied Experience with a Security Incident and Event Management tool such as SPLUNK, or the ability to utilise system administration or scripting experience to address cyber security requirements.
• Demonstrated knowledge should be relevant to both cloud and on-premises Candidate environments.
• An in depth understanding of current cyber security techniques, threats and vulnerabilities and the ability to apply this knowledge to mitigate cyber security risks. This includes the application of frameworks such as MITRE ATT&CK and analysis of TTPs of threat actors.
• Well-developed writing skills and experience maintaining technical documentation.

Desirable criteria

• Experience with automation, preferably security orchestration, automation and response.
• Knowledge of Splunk Risk Based Alerting (RBA).
• Relevant industry certifications such as CISSP, GCIH, GCIA.
• Technical tertiary qualifications, Microsoft or Splunk certifications are highly desirable.

Please contact Sanat on 0400 016 163 or email sanat.anwadwar@talentinternational.com for more information on how to apply.

• You can be based in Canberra, Melbourne, Adelaide or Brisbane
• NV1 clearance mandatory requirement
• 12 months + 12 months
• Multiple positions available

As an experienced Cyber Security Analyst, you will work within the Integrated Cyber Risk Management section to undertake cyber risk assessments of key technology components and systems. You will be required to meet Protective Security Policy Framework (PSPF) requirements and deliver key system authorisations on behalf of the Agency and Shared Services Partners.

Your key duties to include:

• Identify, test and assess applicable security controls in line with the Australian Government PSPF, ISM and agency policies and guidelines.
• Analyse and document security risk and recommend treatments and modifications to security practices and procedures using expertise and technical knowledge.
• Contribute to the system authorisation program of work, system projects and programs, by developing or reviewing security artefacts, including Threat and Risk Assessments and System Security Plans.
• Assist with the development and implementation of security policies, procedures, projects, and strategies.
• Continuously work to improve the efficiency and effectiveness of the cyber security service.
• Educate and inform departmental staff to promote understanding and ensure adherence to security policy and processes.

Selection Criteria:

• Extensive demonstrated experience with risk and information security frameworks, policies, and standards, including the Federal Government Protective Security Policy Framework (PSPF) and Information Security Manual (ISM), and international standards (ISO 27001/2).
• Demonstrated working experience in security threat and risk assessment and development of security authorisation artefacts.
• Demonstrated security experience within complex ICT environments.
• Strong stakeholder management skills, and the ability to communicate security concepts to non-technical audiences both verbally and in writing.
• Understanding of global Cyber Security trends, attack vectors and techniques.
• Demonstrated experience in Federal Government preferred

Please contact Sanat on 0400 016 163 or email sanat.anwadwar@talentinternational.com for more information on how to apply.

• 12 months + 2 x 12 months
• Current TS PV Clearance Required – unless specified otherwise
• Every position requires and OSA
• Canberra based only – no Remote or Interstate work available
• Due to security requirements – On-Site required majority of the time
• Work direct to the client, not via a Third Party

Talent’s large Federal government client has embarked on a major initiative as part of the larger scale transformational program known as REDSPICE. We are seeking specifically to establish a team to supplement existing resources who will be tasked with providing system security design, system management, system administrative support and development of end user training materials.

Positions available include:

• 1 x Systems Engineer
• 1 x Business Analyst
• 1 x Systems Administrator
• 1 x Network Engineer
• 1 x Security Engineer
• 1 x IT Security Advisor
• 1 x Test Manager
• 2 x Security Analysts
• 1 x VMware Engineer
• 1 x Red Hat Linux (RHEL) Engineer
• 1 x Storage Engineer

NV1 minimum required for the following positions. You must be willing to obtain and OSA and undertake a TS PV security clearance.

• 2 x System Engineers
• 2 x Systems Architects
• 1 x Business Analyst
• 1 x Test Manager

Please send an email to steven.jobson@talentinternational.com with the position you’re interested in.

We are on the lookout to appoint Technology & Cyber Security GRC Lead(s) to form part of a core team structure, and to play a pivotal role in safeguarding the technology landscape across the enterprise. These are strategic positions focused on Governance, Risk, and Compliance (GRC) to protect against Cyber threats and to ensure operational resilience.

Key Responsibilities will include (but not limited to):

• Lead the development and enhancement of cyber security governance frameworks.
• Develop and maintain cyber security policies, standards, guidelines, and procedures.
• Provide cyber risk reporting and compliance metrics for senior leadership, the Board, and regulatory bodies.
• Collaborate across the organisation to strengthen overall cyber security posture.
• Support the Head of Technology Governance in shaping cyber security strategies that align with organisational and regulatory expectations.
• Build strong relationships with internal and external stakeholders to ensure effective cyber governance.
• Track and ensure compliance with legislative, regulatory, and industry standards such as PCI-DSS.
• Define, adapt, and deliver cyber security metrics, including Key Risk Indicators and scorecards for senior leaders.

You must demonstrate the following Skills and Experience:

• Proven ability to lead and mentor teams, fostering a collaborative and results-driven environment.
• Deep knowledge of frameworks such as NIST, ISO 27001, and regulatory standards like APRA CPS 234.
• Experience ensuring compliance with cyber security standards, particularly PCI-DSS, and managing associated documentation.
• Exceptional communication skills to build relationships with internal teams, senior leadership, and external regulators.
• Proficient in creating detailed cyber security reports, metrics, and risk indicators for various audiences.
• Demonstrated ability to integrate cyber security into business operations and support continuous improvement initiatives.

Remote hybrid-WFH is supported, with a preference for Sydney or Perth working locations.

Please note that you must hold fully unrestricted working rights for Australia to be considered for these positions.

If you match the selection criteria above and are interested in finding out more about this key position, please forward your updated CV to Huma.Irshad@talentinternational.com by clicking the “APPLY NOW” button.

For a list of all vacant positions, please see our website www.talentinternational.com.

For further enquires please call Huma Irshad on 0418 594 901.

Our client
Our client is a statutory agency tasked with the significant responsibility of protecting Australia’s national interests from foreign threats. As well as collecting and analysing foreign intelligence, our client provides information security services to the Australian Government.

The role
The cyber security technical writer role is to research, develop, review and publish cyber security guidance and technical advice. Technical writers require a deep understanding of cyber security, preferably with experience in one of the following fields: Machine Learning, network security, Cloud or Operational Technology.
Technical writers must possess the ability to write actionable, accurate cyber security guidance that is tailored to a variety of audiences. Technical Writers must be able to work autonomously, or within a team.

Job duties and requirements of the technical writer:

• Liaise with internal and external stakeholders to support technical publications. Including through the following phases of a publication’s development: research, scoping, technical consultation, review and publishing.
• Produce, coordinate and provide novel and unique advice and assistance on contemporary cyber security issues.
• Research emerging technology and apply contemporary knowledge to identify information gaps, cyber security trends, vulnerabilities and threats. From this research, develop actionable cyber security mitigation strategies.
• Work collaboratively within a multi-disciplinary environment.
• Provide support to enterprise tasks, sometimes urgent or ad hoc, such as section governance, supporting briefings, facilitating publication clearances, actioning requests from senior executives, reviewing documents and supporting parliamentary reporting requirements.

Skills and qualifications

• Bachelor’s degree in a relevant technical field, for example, computer science, computer forensics, information security, information technology, cloud computing, machine learning, or cyber security
• At least 5 years’ experience in cyber security
• Excellent communication skills
• Strong leadership experience and an ability to engage with internal and external stakeholders
• Excellent organisational and time management skills
• Ability to prioritise workloads
• Ability to think critically

Application
To apply for this role, hit “APPLY” for more information, contact Emma on 0413 507 344 or email emma.gibbons@talentinternational.com

• 6 months + 12 month extension
• Minimum NV1 clearance required – must pass an OSA
• On-site in Canberra
• Design and support implementation of key security capabilities

Our federal government client is delivering a whole of government federated information sharing environment to provide access to real time intelligence and information across state, territory and federal jurisdictions. The capability is being delivered through a Program team comprised of the multiple government departments in conjunction with agencies at state and territory level.

To support this program of work, we are seeking an experienced Security Architect support the program by defining effective ICT Security capabilities and solutions to meet capability and business requirements.

Your duties will also include:

• Supporting the departments architecture strategies including:
  • Choice of technology
  • System/Solution Architecture Strategy
  • Development and Deployment Infrastructure Strategy
  • Inter-program collaboration, and
  • Implementation Strategy;
• Designing and supporting the implementation of key security capabilities including:
  • Federated Identity and Access Management
  • Gateways and Firewalls
  • Security Information and Event Management (SIEM)
  • Intrusion Detection/prevention
  • Threat and Virus analysis and Encryption (at rest and in transit) on Azure Cloud;
• Coordinating security accreditation activities across the program;
• Developing key security documents (SSP Annex, SSP, SRMP, SOPS) that underpin the security accreditation and architecture governance processes;

Selection Criteria:

• Demonstrated experience in designing and overseeing the implementation of enterprise-wide ICT security solutions in a multi-agency environment, including the ability to define a program of work to achieve tangible and measurable business benefits.
• Demonstrated experience in a Security Architect role in developing cloud-based security solutions including:
  • Gateways and Firewalls
  • Security Information and Event Management (SIEM)
  • Intrusion Detection/prevention
  • Threat and Virus analysis
  • Encryption (at rest and in transit).
• Demonstrated ability to develop and manage security architecture technical designs.
• Demonstrated ability to support and meet obligations for ICT Security Accreditation of systems under the Australian Federal Government Information Security Manual.
• Experience in designing and supporting organisations developing and supporting security capability through Scaled Agile and DevOps methodologies

Please contact Emma Gibbons on 02 6129 6307 for more information and to apply.

• Cybersecurity Architect
• Long Term Contract with possible extension
• Adelaide Based role

The Cyber Security Architect is accountable under broad direction to undertake work with a high level of complexity and/or sensitivity that delivers quality outcomes across the ICT support service functions of the agency. This position has a focus on Cyber Security across several capabilities including:

• identity and access.
• cyber security operations.
• data storage and analytics.
• payment and debt management.
• public facing systems where 3rd parties interact with the NDIA including API Gateway.
• fraud and case management.

The Cyber Security Architect will work with a project team and other SMEs to ensure that the cyber security architecture supports the ‘Crack Down on Fraud’ program of work and meets the business requirements of the program.

If you want to know more, click “APPLY” or you can reach Ivan Aureus at ivan.aureus@talentinternational.com or (08) 8228 1502.

• Cyber Security Architect
• Long Term Contract with possible extension
• Adelaide Based role

The Cyber Security Architect will provide architecture services to design and develop a fully costed plan and business case to uplift Services Australia’s (the Agency) cyber security posture, to appropriately protect significant quantities of sensitive and personal data from escalating cyber threats long-term.

To succeed in this opportunity, they will need:

• Demonstrated experience in delivering exceptional customer service (Essential)
• Ability to plan and prioritise work to meet deadlines (Essential)
• Excellent communication and interpersonal skills, both written and verbal (Essential)

Primary Technologies:

• Au-PDNS, Host-based Sensors (HBS), TLS, DMARC, Wintel, Other mid-range, ASDs Essential 8, Cloud, Zero Trust, ICT Networks, Windows and Linux Operating Systems, M204, SAP CRM.

Key duties may include, but are not limited to:

• Provide expert advice and guidance on contemporary security strategies to manage identified risks and ensure adoption and adherence to industry and mandated standards.

• Conduct a comprehensive current state analysis of the cyber security arrangements in the Agency’s ICT environment and provides recommendations on cyber enhancements needed to bring the future ICT landscape inline with best practice Cyber Security practices.

• Contribute to the development of a fully costed cyber security uplift plan and business case to uplift Services Australia’s cyber security posture, to appropriately protect significant quantities of sensitive and personal data from escalating cyber threats long-term utilising contemporary industry best practices such as secure by design and zero trust.

• Develop new architecture that mitigates the risks posed by new technologies and business practices.

• Contribute to the development of a cyber security strategy and roadmap for implementation of cyber security requirements and practices to reach Government agreed tolerance and risk appetite that would uplift the Agency’s cyber security posture developed consistently with the 2023-2030 Australian Cyber Security Strategy and target state for a future ICT Architecture.

• Design the security solutions to support and align to the Agency’s cyber security and business/ICT requirements.

• Document, present and discuss the end-to-end security architecture and solution options, recommendations, implications, and facilitate and support the decision process.

• Lead end-to-end cyber security solution analysis, design, integration, architecture, co-existence and migration.

• Act as single point of contact to orchestrate the parties involved in complex security projects/programs from a technical and security architecture perspective.

• Ensure adherence to technical security program scope through change requests, managing resources, and technical solution risks and issues.

• Upskill Cyber Security Division staff through coaching, mentoring and succession planning.

• Proactively share knowledge and expertise as the subject matter expert and provide assistance and mentorship to less experienced colleagues.

• Drive innovation, continuous improvement, manage and lead change to cyber security systems and processes.

• Oversee and prepare a range of technical documentation and reports to provide technical leadership to the cyber security projects and services including reviewing test plans and business verification where required.

If you want to know more, click “APPLY” or you can reach Ivan Aureus at ivan.aureus@talentinternational.com or (08) 8228 1502.