• Federal Government Role
• 12 months initial contract + potential to extend
• Location: Canberra (Onsite)
• Baseline Clearance minimum

Bridge IT Engineering is seeking a Cyber Security Manager for a federal government department in Canberra. The Cyber Security Manager will also play a key leadership role in driving policy enhancements, risk mitigation, and security control optimisation, strengthening the organisation’s overall cybersecurity posture. By leading strategic initiatives, stakeholder engagement, and governance alignment, this position will directly support department's mission to safeguard critical data, systems, and operations.

Key duties and responsibilities

1. Under general direction from ITSA, lead Cybersecurity Strategy Implementation program, overseeing key cybersecurity projects, Cyber Policy Uplift, Essential Eight maturity levels improvements, and compliance activities.
2. Develop ICT systems Certification and Accreditation documentation leading Authority to Operate (ATO).
3. Work with internal and external stakeholders and architects to ensure security requirements are built into new projects and support the development of practical security documentation.
4. Provide leadership and mentor staff, fostering cybersecurity awareness and skills development.
5. Under the ITSA guidance, closely work with the Project Manager in delivering the Cyber Security Strategy Implementation program objectives and Cyber security and Assurance Unit tasks.
6. Optimise team resources, mitigating risks and strengthening security performance under ITSA guidance.
7. Provide executive reporting inputs and updates, supporting stakeholder engagement, risk assessments, and compliance updates.
8. Develop and refine Cybersecurity GRC frameworks, ensuring regulatory alignment and best practices.
9. Enforce IT security policies, in collaboration with ICT and Business Units.
10. Enhance security controls across ICT, aligning with Essential Eight, ISM, and best practices.
11. Implement strategic security solutions, addressing business risks and regulatory compliance.
12. Manage security incidents, ensuring swift investigation and resolution.
13. Lead Vulnerability Management.

Essential criteria

1. 5 years or more demonstrated experience working in a cybersecurity leadership role, with in-depth knowledge of whole of Commonwealth Government security frameworks (PSPF, ISM).

2. Strong expertise in developing security documentation (SRMP, SRA, SSP and Annex A, Standard oper-ational procedures) and conducting Essential Eight-compliant security assessments.

3. Proven experience in leading cybersecurity teams and implementing security controls, compliance measures, and risk mitigation strategies, ensuring alignment with government regulations.

4. Skilled in threat modelling and risk assessments, identifying vulnerabilities, assessing impact, and ensuring continuous security monitoring and improvement.

5. Experienced in stakeholder engagement, driving policy adoption across executives, IT teams, and government bodies for seamless implementation.

6. Critical thinker, applying principles-based solutions to address complex security challenges and emerging threats.

Desirable criteria

1. Excellent communication skills, ensuring technical concepts are effectively conveyed to both technical and non-technical audiences, with cross-team collaboration.

2. Leadership and mentoring, fostering a security-aware culture within the organisation.

3. Relevant Tertiary qualifications in ICT, Cyber Security, and appropriate active industry qualifications such as CISSP, CISM, OSCP, CCSP, SANS GCED

4. Hands-on experience with security tools and platforms, including Tenable for vulnerability management, M365 security capabilities, and Microsoft Azure security configurations is highly desirable.

Your ICT Recruiter for this role

Haitham Hamid

[email protected]

*Please note only shortlisted candidates will be contacted