Job description

Your new company

Hays has partnered with a Security Consultancy supporting a QLD Regional Council to identify experienced cybersecurity and ICT governance professionals to support the delivery of a broad cyber maturity, governance uplift and security assurance program.

This engagement will see successful consultants contribute to cybersecurity assessments, governance improvement initiatives, incident response activities, security assurance reviews and executive-level cyber advisory services within a complex local government environment.

The work is expected to be delivered primarily remotely, with occasional site attendance only where required.

Your new role

We are seeking expressions of interest from professionals across several cybersecurity disciplines including:

• Cyber Security Analyst

• Cyber Security Engineer

• Cyber Security Manager

• Penetration Tester

• Governance, Risk & Compliance (GRC) Consultant

Successful consultants may be involved in:

• Cybersecurity assessments and assurance activities

• Security control reviews and effectiveness assessments

• Essential Eight maturity assessments and uplift programs

• ICT governance framework development and improvement

• Cybersecurity risk management initiatives

• Security monitoring oversight and reporting

• Cyber incident investigation and response support

• Policy, procedure and governance documentation development

• Business continuity and resilience activities

• Executive and stakeholder reporting

• Collaboration with internal ICT teams, managed service providers and third-party vendors

What you'll need to succeed

Depending on your area of expertise, you may bring experience in:

• Cybersecurity operations, engineering or architecture

• Penetration testing and vulnerability assessments

• ICT governance and assurance frameworks

• Cybersecurity risk management

• Essential Eight implementation or assessment activities

• Security compliance and regulatory environments

• Incident response and cyber resilience programs

• Executive stakeholder engagement and reporting

• Delivery of cybersecurity services within government, critical infrastructure or highly regulated environments

Relevant industry certifications will be highly regarded, including:

• CISSP

• CISM

• CRISC

• CCSP

• ISO 27001 Lead Auditor / Implementer

• SABSA

• CEH

• OSCP

• Azure Security Certifications

• Microsoft Security Certifications

What you'll get in return

• Initial 12-month engagement

• Up to 24 months of extension options available

• Predominantly remote working arrangements

• Opportunity to support a significant cyber governance and uplift program

• Exposure across strategy, governance, assurance and operational cybersecurity services

• Flexible resource engagement model

• Opportunity to work with a highly experienced cyber delivery team

What you need to do now

If you're interested in any of these opportunities and would like more information, click 'apply now' to forward an up-to-date copy of your CV to , or call us now.

If this job isn't quite right for you, but you are looking for a new position, please contact us for a confidential discussion on your career.