Cyber Security Specialist

Cyber Security Specialist

Contract Duration –Till Dec 2026 with possible extension

Location – Brisbane

DFP Recruitment is seeking an experienced Cyber Security Specialist to provide expert advice and strategic direction across information security policy, governance, and risk management. In this role, you will act as a key security advisor within the Information Security (Governance, Risk & Compliance) team, supporting the uplift of cyber risk management capability across projects and business units. You will work closely with technical and business stakeholders to ensure security is embedded throughout the delivery lifecycle and aligned to best practice frameworks and government standards.

Key Duties and Responsibilities

• Provide expert cyber security advice, guidance, and recommendations aligned with industry best practices and recognised frameworks.
• Apply a risk-based GRC approach to review project and technical documentation, including designs, specifications, control papers, test plans, and implementation plans.
• Translate complex technical and business requirements into clear, practical security findings and recommendations.
• Conduct and contribute to security threat and risk assessments, identifying vulnerabilities, threats, control gaps, and mitigation strategies.
• Engage effectively with technical teams, business stakeholders, and project teams across the full system and project lifecycle.
• Support the Manager Information Security (GRC) in managing risks, issues, reporting, priorities, and communications.
• Collaborate with internal teams to improve cyber security maturity and risk outcomes.
• Contribute to continuous improvement of security governance, processes, and practices.
• Undertake additional duties as required to support information security objectives.

Skills and Experience

• 5+ years’ experience in cyber security, information security, or security architecture roles, including senior or lead-level responsibilities.
• Strong knowledge of security governance, risk, and compliance practices in large and complex environments.
• Experience with frameworks such as ISO 27001, ASD Essential Eight, NIST CSF, PCI-DSS, and other relevant standards.
• Experience supporting or delivering security architecture, assurance, or operational security functions in enterprise environments.
• Proven ability to develop and operationalise ISMS frameworks, policies, standards, and guidelines.
• Strong analytical skills with the ability to assess risk and provide practical, proportionate mitigation strategies.
• Excellent communication and stakeholder engagement skills, with the ability to influence both technical and non-technical audiences.
• Experience in government or similarly complex organisations will be highly regarded.

To Apply

If this sounds like the role for you, please submit an updated copy of your resume in MS Word format by hitting APPLY NOW or contact

Deepika at ***email_hidden***

Applicants new to DFP may be asked to provide additional information including work rights status via a survey link – if requested, we ask that you provide this information in order to expedite your application.

DFP welcomes applications from Aboriginal and Torres Strait Islander people, people with diverse cultural and linguistic backgrounds and people with disability. In addition, DFP will provide reasonable adjustments for individuals with disability throughout the recruitment process. If you identify as a person with disability and require adjustments to the application, recruitment, selection and/or assessment process, please advise via [email protected] or 1300 337 000 and indicate your preferred method of communication (email, phone, text) so we can keep in touch and meet your accessibility needs.

By clicking 'apply', you give consent that DFP may use your personal information to process your job application and to contact you for future employment opportunities. For further information on how DFP process your personal information please review the DFP Information Collection and Privacy Policy via https://www.dfp.com.au/about-us-1/policies. Do not submit any sensitive personal information in your resume.