Cyber Assessment Lead

C4i Solutions is a leading Technology, ICT, and Digital Solutions company, delivering real outcomes for our Defence, Government, and Industry partners. We're growing and we're looking for great people who share our values, believe in our mission, and care about what they do. People who value teamwork, take pride in their work, and want to make an impact.

About the Role:

As the Cyber Assessment Lead in C4i Solutions, you will play a pivotal role in ensuring systems align with Defence security frameworks including the ISM, PSPF, DISP, NIST, and Essential Eight. You will contribute to accreditation activities, security compliance reviews, technical risk assessments, and security-by-design initiatives that support operational capability and strengthen organisational cyber resilience. This role is ideal for a motivated cyber security professional with strong analytical skills, a collaborative mindset, and experience working within Defence, Government, or other security-sensitive environments.

This role may require travel to conduct on-site assessment onboard Navy Fleet Units, Navy Shore Establishments, or other platforms. Familiarisation with Defence equipment is preferred. This role is located onsite in Sydney, CBD.

• Conduct cyber security assessment and authorisation (A&A) activities for Defence ICT, OT, and military platform systems in alignment with Defence security frameworks including ISM, PSPF, DISP, NIST, and applicable Defence policies and procedures.
• Lead technical assessments and validation activities for cyber security control implementations across IT and OT environments to assess effectiveness, compliance, operational suitability, and residual risk.
• Work within a small specialist team to deliver cyber security risk assessments of military platforms and associated systems for acceptance and sign-off by the Defence CISO, NI&IW, and other Defence stakeholders as required.
• Lead and coordinate on-site cyber security assessments, including stakeholder engagement, technical inspections, evidence collection, vulnerability analysis, security validation activities, and reporting of findings and recommendations.
• Liaise with Capability Managers (CMRs), security specialists, engineers, project teams, and operational support personnel involved in the operation, sustainment, and maintenance of Defence IT and OT systems within military platforms.
• Develop system risk assessment reports and security assessment documentation based on the cyber threat landscape, threat modelling, vulnerability analysis, and intelligence available through Defence, Government, and industry channels.
• Develop and maintain authorisation artefacts including cyber security risk assessments, security assessment reports, and remediation recommendations to reduce cyber security risk.
• Identify security vulnerabilities, analyse cyber risks, and provide remediation and risk mitigation recommendations to support the secure operation and sustainment of Defence capabilities.
• Provide technical cyber security advice and guidance to Defence stakeholders, engineering teams, and project managers regarding emerging threats, secure architecture, control implementation, and security-by-design principles throughout the system lifecycle.
• Develop and improve techniques, processes, and procedures for the management of cyber security information and associated cyber security activities across Defence environments.
• Provide knowledge transfer, mentoring, and guidance to Navy, FCU, DNE, and other Defence personnel regarding cyber security management, assessment methodologies, and cyber security risk management practices.
• Provision updates and recommendations relating to platform equipment, utilities, cyber threat models, and security control improvements to support evolving operational and threat environments.

• Australian citizen (required for Defence projects) with a min AGSVA NV1 clearance, and able to work across ITAR. The ability to obtain a Negative Vetting 2 (NV2) security clearance is preferred.
• Experience working across enterprise Defence project environments.
• A BACH or other tertiary qualification relative to your role.
• A relevant industry qualification in either IRAP, CISSP, CISM, CISA, or ISO27001 Lead Auditor.
• Familiar with ISM, DSPF, and PSPF.
• Communicates clearly and confidently, both written and verbal.
• Highly organised with strong attention to detail.
• Builds positive relationships and manages stakeholders effectively.
• Works well independently and takes initiative.
• Can manage competing priorities and meet deadlines.
• Adapts easily to change and works well in a team environment.

If you're looking for a workplace where your skills, experience, and dedication are genuinely valued we'd love to hear from you. We are a close-knit team of veterans, problem-solvers, tech heads, dads, mums, soccer coaches, and weekend adventurers who love what we do, like to have a bit of fun, and don't take ourselves too seriously. What brings us together is a passion for doing great work that makes a real difference to those who serve.

If this sounds like your kind of team, apply now. We'd love to hear from you.

www.C4isolutions.com.au