Program Security Architect

Program Security Architect - Critical Infrastructure Cyber Uplift

12 month contract

$1300 - $1400 per day

Hybrid (3 days per week in Melbourne office)

We're looking for a Program Security Architect to play a key role in a major multi-year cyber security uplift program protecting critical energy infrastructure.

This is a senior architecture role embedded in a five-year program focused on lifting cyber maturity across both IT and OT environments, aligning to the Australian Energy Sector Cyber Security Framework (AESCSF) and the ASD's CI Fortify guidance, and strengthening the resilience of systems communities rely on every day.

You'll work across security architecture, identity and remote access, cloud and OT/IoT security, partnering with senior stakeholders, delivery partners and vendors to make sure solutions are secure by design and deliver real operational outcomes.

Key responsibilities:

• Lead the creation, review, and approval of secure solution architectures for new cyber security initiatives, ensuring alignment with business objectives, technology strategy, and security requirements.
• Provide architectural leadership, strategic direction, and governance oversight across cyber security programs and uplift initiatives.
• Ensure technology solutions, products, and services are designed and implemented with appropriate security controls in alignment with cyber security policies, standards, regulatory obligations, and industry best practices.
• Partner with business stakeholders to translate business requirements into secure and scalable technology designs and implementation roadmaps.
• Act as the primary technical liaison between business teams, delivery partners, and vendors to ensure solution designs meet security, operational, and business outcomes.
• Review, challenge, and assess vendor and partner technical proposals to ensure alignment with cyber security architecture principles, standards, and target-state requirements.
• Provide specialist Cyber Security Architecture expertise across the Cyber Security Program.
• Support the successful delivery of strategic cyber security initiatives, including CI-Fortify, Remote Access Uplift, AESCSF v2 SP2 alignment, and other IT/OT security improvement programs.
• Ensure security risks, architectural considerations, and compliance requirements are effectively addressed throughout project and program lifecycles.
• Contribute to the continuous improvement of cyber security capabilities, reference architectures, design patterns, standards, and security controls.
• Collaborate as a member of the Security Architecture team, providing subject matter expertise and partnering with technology, operational, and business stakeholders to achieve secure and resilient outcomes across the organisation.
• Promote security-by-design principles and ensure cyber security requirements are embedded into enterprise, solution, cloud, and operational technology architectures.

About you

You'll be an experienced Security Architect with a strong background in complex, regulated environments and large-scale cyber security programs.

We're particularly interested in people who have experience across:

1. Enterprise and solution-level cyber security architecture and design.
2. Critical infrastructure, energy or utilities environments.
3. IT and OT/ICS/IoT security, including IT/OT convergence.
4. AESCSF, NIST CSF, Essential Eight, ISO 27001 or similar frameworks.
5. Security of Critical Infrastructure (SOCI) obligations and critical infrastructure risk management.
6. Identity and access management, secure remote access and network segmentation.
7. Cloud security architecture (Azure and hybrid environments).
8. Reviewing and challenging vendor and partner designs and proposals.
9. Architecture governance, design authority and security assurance.
10. Working within large programs alongside delivery partners and vendors.
11. Managing senior stakeholders and translating business needs into secure designs.