AISL-241 IT Cybersecurity Implementer Consultant

IT Cybersecurity Implementer Consultant

Hybrid (80% on-site, 20% remote).

Role Overview:

We are seeking an experienced IT Cybersecurity Implementer Consultant to provide operational security support within the Information Security team. The consultant will play a key role in maintaining and enhancing cybersecurity measures, supporting governance, and ensuring compliance with industry standards.

Key Responsibilities:

• Deliver security expertise for BAU activities, including incident management, user requests, threat analysis (spam/phishing), and vulnerability remediation follow-up.
• Conduct or support vulnerability management, penetration testing, secure code assessment, and threat intelligence activities.
• Lead BAU security initiatives, ensuring timely and high-quality delivery.
• Assist in business continuity, disaster recovery, and cybersecurity exercise preparation.
• Coordinate with third-party security service providers.
• Advise on best practices for MS365 and Azure architecture, configuration, and operations.
• Monitor emerging threats and assess their relevance to systems and processes.
• Provide market analysis for cybersecurity tools and solutions.
• Support cybersecurity governance, including risk management, policies, compliance, and alignment with frameworks such as NIST CSF or the Australian Essential Eight.
• Contribute to security awareness activities.

Deliverables:

• Reports and analysis on outputs from key security services (SOC activities, vulnerability management, penetration testing, etc.).
• Documentation for internal and external audits.
• Contributions to quarterly Key Risk Indicator (KRI) reports.
• Updates and reviews of security-related documentation (policies, procedures, processes).
• Draft assessments for IT security reviews.
• Materials for cybersecurity requirements, plans, and test cases.
• QA reviews of security documentation for clarity and consistency.
• Meeting agendas, minutes, and governance support materials.

Profile Requirements:

Technical Skills:

• Bachelor’s degree (or higher) in IT, cybersecurity, or related field; non-related degrees require significant ICT experience.
• Experience level:
  • Junior Consultant: 0–3 years
  • Consultant: 3–7 years
  • Senior Consultant: 7–10 years
• Strong understanding of cybersecurity principles and tools.
• Knowledge of Microsoft security ecosystem; recent experience with Microsoft security tools is a plus.
• Project management certifications (PM2, Prince2, PMI) are an asset.

Soft Skills:

• Proactive, “can-do” attitude and ability to integrate with diverse teams.
• Strong analytical and problem-solving skills.
• Ability to work independently and coordinate with stakeholders.
• Excellent organizational skills for meetings and documentation.
• Fluent in English (written and spoken).