Lead Cyber Security Adviser – Governance, Risk & Compliance

Lead Cyber Security Adviser – Governance, Risk & Compliance

Rate guide: $135–$155 per hour including superannuation

Location: Canberra, Brisbane, Melbourne, Sydney or Adelaide

Initial contract: Up to 12 months

Extensions: Potential extensions totalling up to a further 24 months

Expected start: 1 February 2027

Experience level: Lead / EL1 equivalent

Security clearance: Current active NV1 or higher

Working arrangements: First six weeks onsite. Hybrid arrangements may then be considered, with a minimum of three days per week onsite. Applicants must reside within reasonable commuting distance of their nominated office.

Maximum hours: RFQ lists 80 hours per week; ordinary working hours and the stated maximum are subject to confirmation.

Overview

Babylon Data is seeking experienced Lead Cyber Security Advisers for multiple contract opportunities supporting a major Australian Government agency.

These roles combine cyber security governance, risk and compliance with practical security advice across complex enterprise ICT environments. You will lead risk assessments, strengthen security policies and controls, guide remediation activities and help stakeholders apply government security requirements.

We are looking for advisers who can translate technical risks into clear business decisions and demonstrate measurable outcomes from cyber security uplift, assurance or compliance initiatives.

Key responsibilities

• Lead cyber security risk assessments, business impact analysis and assurance activities across systems, applications, websites, tools and business processes.
• Develop and maintain information security policies, standards, guidelines and procedures.
• Assess system designs and security controls, identify weaknesses and recommend practical mitigations.
• Review third-party software and vendors against organisational security requirements.
• Support internal and external audits through compliance monitoring, evidence preparation and remediation tracking.
• Advise on security capabilities and controls across networks, endpoints, applications and ICT products.
• Support system accreditation, System Security Plans and security assessment activities.
• Engage executives, technical teams, business stakeholders and external providers to embed security requirements into delivery and operations.
• Resolve or escalate complex and sensitive cyber security matters.
• Lead team priorities, resources, performance and workflows, while supporting mentoring and knowledge transfer.

Essential experience and requirements

• Demonstrated delivery of cyber security uplift, resilience, remediation or compliance initiatives within large, complex ICT environments, preferably Australian Government or other regulated environments.
• Strong practical experience in cyber security governance, risk management, assurance and compliance.
• Demonstrated application of the Protective Security Policy Framework, Information Security Manual and Essential Eight, supported by knowledge of NIST and other relevant security and risk frameworks.
• Experience assessing security risks and controls and developing actionable mitigation and remediation advice.
• Familiarity with network, endpoint and application security controls.
• Understanding of system accreditation, System Security Plans and security assessment processes.
• Proven ability to influence and collaborate with senior executives, technical specialists, business representatives and external providers.
• Ability to communicate complex cyber security concepts clearly to technical and non-technical audiences.
• Leadership capability consistent with an EL1-equivalent role, including managing priorities, team performance and delivery outcomes.
• A current active NV1 security clearance or higher, which must be maintained throughout the engagement.

Desirable experience

• Cyber security or ICT uplift delivery within Services Australia or another Australian Government agency.
• Enterprise experience spanning cloud platforms, identity and access management, security operations, infrastructure, applications and data services.
• Delivery within tight timeframes while managing competing priorities, dependencies and stakeholder expectations.
• Demonstrated mentoring, collaboration and knowledge transfer.
• ISACA AI Security or AI Audit training.