Downer
Leading provider of integrated services across Australia and New Zealand, delivering infrastructure solutions.
Cyber Security Manager
Lead cyber security risk, governance & incident response for Defence high‑frequency comms program.
Job Highlights
About the Role
• Conduct comprehensive cyber and information security risk assessments, business impact analyses, and control evaluations across SHFC systems. • Develop, review, and advise on security standards, accreditation documentation, and program‑specific security frameworks aligned with Defence requirements. • Lead incident response and investigations, providing recommendations for corrective actions and policy amendments. • Coordinate accreditation activities with prime contractors and stakeholders to ensure supplier compliance with DISP and contracted security obligations. • Improve SHFC security governance by enhancing processes, policies, and assurance practices, and communicating risks to leadership. • Maintain a minimum NV1 (or higher) security clearance; compliance with ITAR may be required. • Meaningful work: deliver critical Defence projects that protect Australia and shape its future.
Key Responsibilities
- ▸risk assessment
- ▸security standards
- ▸incident response
- ▸accreditation
- ▸governance
- ▸clearance
What You Bring
We are seeking highly experienced professionals to support critical projects within the Joint Strategic High Frequency Communications (SHFC) Program, which provides the Defence High Frequency Communications System (DHFCS). This role offers a broad scope, interfacing with security, engineering, sustainment, and safety requirements across the programme. • Hold relevant tertiary qualifications in Information Security, Computer Science/Engineering, or equivalent experience, plus certifications such as CISSP, CISM, CRISC, or CISA. • Demonstrated experience in cyber security risk assessment and control evaluation within Defence policy frameworks. • Proven ability to lead or coordinate incident response and investigations following structured Defence processes. • Skilled at interpreting and integrating cyber threat intelligence to inform program risk posture and security decisions. • Strong written and verbal communication skills for explaining complex security issues to diverse stakeholders.
Requirements
- ▸cissp
- ▸cism
- ▸crisc
- ▸cisa
- ▸risk assessment
- ▸incident response
Benefits
Downer values meaningful work, professional development, and strong employee benefits. Staff enjoy career‑mapping, accelerated learning programs, community of practice networks, and perks such as discounts on healthcare, retail, and vehicles. As a WORK180 Endorsed Employer, Downer supports flexible work arrangements, inclusive leadership, and equitable access to opportunities, and it offers assistance or adjustments throughout the recruitment process for candidates who need them. • Professional development: access career mapping, accelerated learning, and Communities of Practice. • Great perks: discounts on healthcare, retail, vehicles, and more through Perks@Downer. • Veteran support: up to 20 days of Reservist Leave to stay connected post‑service.
Work Environment
Onsite