Cyber Security Architect

Summary: Our client has a good and generally stable IT team, and is based in Sydney. Work will be carried out as hybrid – generally 3 days office / 2 days WFH. They are looking for a Cyber Security Architect to come in for an initial 6 month contract, and the role is expected to extend for a further 6 months (and possibly more). As it is a new role, there is some possibility that it will go permanent after that. As such, it would suit someone who usually works in permanent roles, as well as contractors. Due to the nature of the client organisation's "business mandate", IT security is absolutely critical with regards to their systems. Note here, that to apply for this role you must , at a minimum, have an Australian Permanent Residency visa, or be an Australian Citizen. Responsibilities include: In this role, working as a Cyber Security Architect, you will have the following responsibilities: Development of security architectural methods and frameworks in conjunction with relevant teams; Provide security specific advice across a wide range of technical areas; Ensure the correct security controls are in place and maintained; Ensure that solutions adhere to security policies and standards; Support solutions development to ensure that solutions are secure by design; Assist with development of the Security Service Catalogue; Develop security artefacts for cloud environments; Assist in determining the baseline security configuration standards for systems (especially cloud-based); Work closely with selected security vendors. Skills and Experience preferred: ( We don't expect you to have all of the following; just most. ) Experience with Microsoft and AWS cloud solutions that includes the security controls; Knowledge of third-party products that would contribute to the securing, governance and operations related to a Microsoft and/or AWS cloud environment; Preferably at least 5 years of experience in cyber security architecture with demonstrated expertise in developing and implementing security architecture methodologies; Demonstrated experience in securing on-prem and cloud implementations to PROTECTED standards for workloads and data; Demonstrated performance of security design/architecture reviews, code reviews, and penetration tests of large applications, systems and/or networks; Detailed knowledge of OWASP Top 10 and associated mitigation strategies; Detailed understanding of design and security in web-based architectures including Single Page Applications and API-oriented architectures; Understanding of, and preferably experience in implementing Zero-Trust principles; Knowledge of securing on-prem and cloud infrastructure systems including Microsoft and Linux oriented architectures; Knowledge of security standards and frameworks such as PSPF, ISM, ISO 27000, NIST and SOC2; Proven track record and strong experience in domains such encryption, access and identity management, vulnerability management; A track record of working with infrastructure and development teams to build secure solutions; Experience with both Microsoft and AWS cloud solutions (including the contextual cloud security controls); We will be accepting resumes until COB Wednesday 21 October, and will be reviewing resumes progressively as they come in, and unlike most recruiters, w e read every resume . If you feel your experience significantly matches the details above, please do not delay applying!