Downer
Leading provider of integrated services across Australia and New Zealand, delivering infrastructure solutions.
Cyber Security Manager
Manage cyber security risk, compliance, and incident response for Defence HF communications.
Job Highlights
About the Role
The role supports the Strategic High Frequency Communications (SHFC) Program, which provides the Defence High Frequency Communications System (DHFCS). It offers a broad scope, focusing on cyber and information security risk assessments, security standards development, incident response, accreditation support, and governance improvement. • Conduct cyber and information security risk assessments, business impact analyses, and control evaluations for SHFC systems, integrating threat intelligence. • Develop, review, and advise on security standards, guidance, accreditation documentation, and program‑specific security frameworks aligned with Defence requirements. • Lead incident response and investigations, recommending corrective actions and policy updates per Defence procedures. • Coordinate accreditation activities with primes and stakeholders to ensure supplier compliance with DISP, security obligations, and incident‑responsibility requirements. • Strengthen SHFC security governance by improving processes, policies, assurance practices, and communicating risks to leadership.
Key Responsibilities
- ▸risk assessment
- ▸security standards
- ▸incident response
- ▸accreditation coordination
- ▸governance improvement
- ▸threat intelligence
What You Bring
The successful candidate will hold relevant tertiary qualifications in Information Security, Computer Science/Engineering, or equivalent experience, together with certifications such as CISSP, CISM, CRISC, or CISA, and a current NV1 or higher security clearance. Experience in cyber security risk assessment, incident response, and interpreting threat intelligence within Defence frameworks is required, along with strong communication skills. • Hold relevant tertiary qualifications in Information Security, Computer Science/Engineering, or equivalent experience. • Possess professional certifications such as CISSP, CISM, CRISC, or CISA and maintain a current NV1 or higher security clearance. • Demonstrate proven experience in cyber security risk assessment, control evaluation, and application of Defence cyber and information security policies. • Show experience leading incident response and investigations within Defence frameworks. • Exhibit strong written and verbal communication skills for explaining complex security issues to diverse stakeholders.
Requirements
- ▸infosec degree
- ▸cissp
- ▸nv1 clearance
- ▸risk assessment
- ▸incident response
- ▸communication
Benefits
As a WORK180 Endorsed Employer, Downer offers flexible work arrangements, inclusive leadership, and equitable access to opportunities, while providing support or adjustments throughout the recruitment process.
Work Environment
Onsite