Total 13 legal public security job vacancies in Australia

Role: Security Assurance Coordinator
Location: MoD Corsham - Hybrid - 3 Days Onsite
Duration: 31/03/2025
Rate: £775 - £825 P/Day - UMB - Inside IR35

Overview

The Security Governance, Risk & Compliance capability is required to deliver OpNET security risk management, implement security control measures, and documented evidence to meet OpNET assurance and compliance requirements as set by the MOD. Specifically, this means producing documentation and evidence to support:

* Cyber Defence and risk (CyDR) Secure by Design (SbD) iaw JSP 440.
* Network Operating Authority (NOA) JSP 604 Rules:
* Rule 10 - Information based capabilities shall be assured in accordance with current policy in JSP 440 Part 2 Leaflet 5C.
* Rule 11 - Defensive cyber operations assurance and cyber network defence compliance.
* Rule 16 - ICT capabilities and services shall be designed to provide a high-quality product.

Within existing NSoIT(D) governance and management structures, and following extant OpNET processes and ways of working, the following are to be delivered:

* Subject matter expertise, advice and guidance on security matters relating to CyDR Secure by Design (SbD )of MoD systems to the DC2E/SERAPHIM project staff.
* Security awareness material, briefings and Security Operating Procedures (SyOPs) as required to system users and maintainers.
* Conduct and routinely manage DC2E/SERAPHIM security risk assessments (and associated security controls using NIST 800 methodologies) and lead mitigation action.
* Integration of DC2E/SERAPHIM security controls, functions and tools with wider DD enterprise strategic security approach and solutions.
* Organise and chair a LAD(T) project Security Working Group.
* Implement security controls or all aspects of physical, procedural and personnel security related to the development and delivery of DC2E/SERAPHIM.
* Manage all aspects of 3rd party routine and annual CHECK IT health checks, Penetration Tests and vulnerability assessments, and associated remediation activities.
* Identify and communicate current and emerging security threats to the DC2E/SERAPHIM project.
* Provide solutions that balance business and operational requirements with information and cyber security requirements.
* Identify risks associated with business processes, operations, information security programs and technology projects.
* Conduct security evaluations of technical design and implementation documentation such a HLDs, LLDs and work instructions.
* Integrate and align DC2E/SERAPHIM security aspects with wider NSoIT(D) and OpNET security solutions and ways of working, including security operations functions.
* Support the LAD(T) Security Architect and LAD(T) Security Engineer to ensure that technology solutions meet SbD and risk tolerance requirements.

All Deliverables Are to Be:

* Tailored and aligned with existing OpNET Security, Risk and Compliance, and Security Operations functions.
* Agreed and coordinated with the OpNET Black/Red Security Assurance Coordinator (SAC).

Role Title: Sentinel SIEM Security Engineer

Duration: contract to run until 31/12/2025

Location: Warwick, hybrid 2-3 days per week onsite

Rate: up to £567 p/d Umbrella

Must be eligible for BPSS

Key Skills/ requirements

• Experience supporting and configuring complex technical environments involving large network and security projects.
• Ability to work as part of a team and has the capacity of taking on escalated issues from other team members.
• A dynamic interest in solving technical issues as well as learning new skills.

Required Skills

• 2+Years' experience of deploying and maintaining Microsoft Sentinel SIEM solution particularly focusing on Security Use Cases. MS Sentinel hands on experience is a must!
• Experience with different SIEM solutions

Knowledge of some of the following leading Security Products would be a plus:

• SIEM - Splunk, Rapid7 Insight IDR
• IDS/IPS - Checkpoint, Fortigate
• Endpoint Security Solutions - Cylance, Checkpoint, Crowdstrike, Forcepoint

All profiles will be reviewed against the required skills and experience. Due to the high number of applications we will only be able to respond to successful applicants in the first instance. We thank you for your interest and the time taken to apply!

Role Title: Data Security Policy Specialist

Duration: contract to run until 10/05/2025

Location: Knutsford, hybrid 2-3 days per week

Rate: up to £633.15 p/d Umbrella

Role purpose / summary

The Data Security Policy Specialist will be responsible for migrating data loss prevention (DLP) policies and practices from Broadcom DLP-DAR to BigID and Microsoft Purview. This role involves writing and implementing data policies for on-premise file-share scanning and SharePoint Online, and ensuring compliance with various financial regulations. The ideal candidate will have expertise in BigID and Purview policy writing, as well as skills in regex, ServiceNow, and stakeholder engagement. An understanding of Isilon filers is also desired.

Key Skills/ requirements

• Policy Migration and Implementation
• Transition existing Symantec DLP data-at-rest policies to BigID and Microsoft Purview.
• Develop and configure BigID policies for on-premise file-share scanning.
• Implement and manage Purview policies for SharePoint Online and other data repositories.
• Data Scanning and Classification
• Create and optimize data classification labels and rules to identify sensitive information such as passwords, card numbers, PII, and other regulated data.
• Expand scanning capabilities as required by financial regulators and internal data protection standards.
• Technical Skills Application:
• Utilize regex for custom data identification and policy development.
• Leverage ServiceNow for tracking incidents, change requests, and policy updates.
• Stakeholder Engagement:
• Collaborate with internal teams to understand data security requirements and provide guidance on policy application.
• Engage with stakeholders to gather requirements, address concerns, and ensure smooth policy implementation.

System Knowledge:

• Apply knowledge of Isilon filers to understand and manage data scanning within these environments.
• Troubleshoot and resolve any issues related to data scanning and policy enforcement.

Required Skills and Qualifications:

• Proven experience with BigID policy writing and implementation.
• Expertise in Microsoft Purview for data-at-rest scanning and policy management.
• Strong proficiency in regex for data classification and policy creation.
• Experience with ServiceNow for incident and change management.
• Ability to engage with stakeholders effectively and understand their data security needs.
• Knowledge of Isilon filers and their role in data scanning is preferred.
• Strong analytical and problem-solving skills.
• Excellent communication and documentation skills.

Preferred Qualifications:

• Certification in data security or information protection (e.g., CISM, CISSP).
• Experience with other DLP tools or data classification systems.
• Background in financial services or regulated industries.

All profiles will be reviewed against the required skills and experience. Due to the high number of applications we will only be able to respond to successful applicants in the first instance. We thank you for your interest and the time taken to apply!

Role Title: Security Architect
Duration: 2 Months
Location: Canary Wharf / Hybrid (3 days on site)
Rate: £730/d - Umbrella only

Would you like to join a global leader in consulting, technology services and digital transformation?

Our client is at the forefront of innovation to address the entire breadth of opportunities in the evolving world of cloud, digital and platforms.

Role purpose / summary

The Security Architect will be responsible for designing, implementing, and maintaining the security architecture of the organization. This role requires deep expertise in security patterns to ensure the protection of IT systems and data.

Key Responsibilities:

• Design and Architecture: Develop and maintain security architectures for IT projects, ensuring they align with business goals and regulatory requirements.
• Implementation: Oversee the deployment of security solutions, ensuring they meet the agreed requirements and resolve any technical issues.
• Risk Assessment: Conduct system security and vulnerability analyses and risk assessments.
• Policy Development: Develop and maintain security policies, standards, and guidelines.
• Incident Response: Participate in incident response and forensic investigations.
• Collaboration: Work closely with other IT teams to design and implement effective security solutions.
• Monitoring and Evaluation: Continuously evaluate existing security tools and recommend replacements or complementary tools to address gaps.

Key Skills/ requirements

Qualifications:

• Education: Bachelor's or Master's degree in Computer Science, Information Technology, or a related field.
• Certifications: Relevant certifications such as CISSP, CISM, CEH, or AWS Security.
• Experience: 5+ years of experience in security architecture, with a focus on designing and implementing security solutions.
• Skills:
  • Deep understanding of security protocols, cryptography, authentication, authorization, and security patterns.
  • Strong programming expertise in languages such as Python, Java, or C++.
  • Excellent problem-solving and analytical skills.
  • Ability to stay up to date with the latest security trends and advancements.

Desired Attributes:

• Technical Expertise: In-depth knowledge of IT security and multiple technical domains including web, mobile applications, middleware, compute, network, and cloud security patterns.
• Business Acumen: Strong understanding of the organization's goals and strategy to design solutions that meet business needs.
• Leadership: Ability to lead multiple complex security technologies and strategies, demonstrating perceptible business value.

All profiles will be reviewed against the required skills and experience. Due to the high number of applications, we will only be able to respond to successful applicants in the first instance. We thank you for your interest and the time taken to apply!

Role Title: Infrastructure and Security Architect
Duration: 6 Months
Location: Remote
Rate: £550/d - umbrella ONLY

Would you like to join a global leader in consulting, technology services and digital transformation?

Our client is at the forefront of innovation to address the entire breadth of opportunities in the evolving world of cloud, digital and platforms.

Job Description:

Infra / DevOps with Security expertise

We are seeking an Infrastructure Architect to design and implement advanced IT infrastructure solutions.

Candidate must have recent GCP experience

You will manage VPC setup, IAM roles, VPN, networking, firewall configurations, and GCP services, ensuring reliable and scalable architectures. Your responsibilities will include configuring GCP services such as Compute Engine, VPC, and Cloud Functions, and integrating them with on-premise systems. You will also design secure IAM policies, manage VPN solutions, and configure firewalls to safeguard data and systems.

Developing infrastructure-as-code scripts using tools like Terraform is essential. Monitoring performance, optimizing operations, and ensuring high availability are key aspects of the role.

You will collaborate with various teams to maintain cohesive infrastructure solutions and document configurations for compliance.

A bachelor's degree in Computer Science or a related field, along with significant experience in cloud and infrastructure management, is required.

Preferred certifications include Google Cloud Professional Cloud Architect and VMware Certified Professional.

All profiles will be reviewed against the required skills and experience. Due to the high number of applications, we will only be able to respond to successful applicants in the first instance. We thank you for your interest and the time taken to apply!

Responsibilities

• Analyzing Security Events and Incidents: Investigate and respond to security events and incidents impacting the internal business and its clients.
• Developing SIEM Use Cases: Create and refine security information and event management (SIEM) use cases to enhance security monitoring.
• Implementing Security Controls: Design and deploy security controls and configurations to ensure a secure environment.
• Proactive Vulnerability Management: Conduct continuous vulnerability assessments and ensure timely remediation in accordance with policy.
• Collaborating on Secure Development: Work with Beeks' development teams to integrate secure coding practices.
• Maintaining Security Tools: Configure and manage security tools across the company's infrastructure.
• Third-Party Security Assessments: Work with external entities to conduct security tests, assessments, and audits of information security practices.
• Risk Management: Identify, assess, manage, remediate, and track security risks, ensuring key risks are reported to the Chief Information Security Officer (CISO).
• Internal Security Audits: Perform regular audits aligned with ISO/IEC 27001 and SOC2 standards.

Ideally, you will have experience with:

• Hands-on Security Experience: 2-3 years of practical experience with tools such as SIEM, vulnerability management, endpoint detection and response (EDR), application security, and identity and access management.
• Incident Response: Proven experience in deploying and managing security infrastructure and responding to major incidents.
• Microsoft Security Experience: Knowledge and experience with Microsoft 365 Defender and Azure security (certifications like SC-200, MS-500, AZ-500 are advantageous).
• Adaptability with Security Technologies: Experience in learning and using various security technologies, including private and cloud infrastructure.
• Familiarity with Security Frameworks: Understanding of information security frameworks such as CIS, NIST, and NCSC CAF, along with the associated processes and tools.
• Threat Hunting: Experience in threat hunting and identifying anomalous activities through log analysis.
• Understanding of ISO27001/SOC2: Familiarity with ISO27001 and SOC2 frameworks.

The business has doubled in size over the past 3 years and have been on a consistent upward trajectory since their foundation less than 15 years' ago - There is ample opportunity to grow both in terms of skillset and career progression.

In addition to a salary of between £55k-£70k, a range of benefits uncommon to most similar companies are on the table:

• Share option scheme - The Business offer 10,000 options (currently valued at £17,000) which can be cashed out after 2 years' service. The company has more than doubled in size since 2021 with this number projected to increase.
• Pension and Life cover (4x salary)
• Hybrid arrangement (2 days remote) and flexible work hours
• 33 days annual leave (inc. bank holidays)
• On-site gym, PT sessions and massage therapist
• Office Bar

Role Title: OT Security Monitoring Specialist (SC Cleared)
Duration: 3 Months
Location: Remote
Rate: £700+ per day - Umbrella only

NOTE: Applicants must hold active security clearance to be considered for this role

Would you like to join a global leader in consulting, technology services and digital transformation?

Our client is at the forefront of innovation to address the entire breadth of opportunities in the evolving world of cloud, digital and platforms.

Key experience:

• Understanding of typical OT security events and threats which should be monitored
• Understanding of security operations using SIEM systems
• Understanding of OT security architecture and Purdue models
• Understanding of service transition and transformation projects
• Industry experience in the utility sector
• Radiflow
• Microsoft Sentinel

Capabilities:

• Commitment to quality deliverables and project reporting to time and plan
• Good customer facing communication skills. Comfortable interacting with Customer OT engineers and with Customer security leaders
• Ability to pass on project knowledge to a service delivery team through verbal guidance, awareness sessions and written materials
• Effective team working and time management as part of a small team

All profiles will be reviewed against the required skills and experience. Due to the high number of applications, we will only be able to respond to successful applicants in the first instance. We thank you for your interest and the time taken to apply!

Cyber Security Lead

Hybrid

50k (flex) + Car Allowance (5k)

Variety of locations: Weymouth, Dorset, London or Stoke.

The Client:

Are a well-known High St and Online retailer who are seeking a Cyber Security Lead who specialises in Microsoft / Wintel Servers and Virtualisation supporting a UK wide infrastructure.

Objective:

You will support the Head of Information Security in delivering the Information Security service to the global business.

You will lead all Cyber Security Operations function and be the first point of contact for technical information security related matters.

Role Responsibilities:

• Line Managing and mentoring the Sec Ops team.


• Conducting security focussed risk assessments.


• Act as the first point of escalation for identifying security incidents and conduct their investigation.


• Managed vendors.

Key Requirements you will need:

• Vendor Management experience.


• Around 5 years' experience in IT.


• Around 2 years' experience having managed or mentored more junior analysts.


• Experience with configuring and utilising security tooling.

Business Knowledge:

• Knowledge of Retail and eCommerce is of great advantage but is not essential.


• Working knowledge of the Information Security elements of Data Protection regulations.


• Knowledge of the NIST Cyber Security Framework is of advantage.

Call Chandon on 0121 387 5741.

IT Cyber Security Analyst & Team Leader - CISSP or CySA+ or MSc Information Security

Weymouth, Dorset, or London, South East UK or Stoke on Trent, Staffordshire

£50,000pa + Hybrid & Flexi-Working & Training & Certifications Available

Weymouth, Dorset, or London, South East UK, or Staffordshire + Hybrid and Flexible Working as Standard

The Client: Are a well-known High St and Online retailer who are seeking a Senior IT Cyber Security Analyst who specialises in Microsoft / Wintel Servers and Virtualisation supporting a UK wide infrastructure.

Objective: You will Lead 2 x Cyber Security Analysts, giving support to the Head of Cyber Security in delivering the Information Security service to the global business.

You will lead all Cyber Security Operations function and be the first point of contact for technical information security related matters.

Role Responsibilities:

• You will Lead 2 x Cyber Security Analysts, giving support to the Head of Cyber Security
• Act as the first point of action or escalation for the identification of security incidents and their investigation.
• Be responsible for the managed Security Operations Centre (SOC), Network Monitoring and Managed Detection and Response services and associated vendor relationships.
• Offer mentoring, advice and guidance to those in your Team
• Be the subject matter expert for technical security related queries, providing the Security Architect, IT Service and Delivery teams and business stakeholders with authoritative advice and defined security requirements.
• Be responsible for the Security Education and Awareness scheme.
• Ensure Cyber Security campaigns are conducted, and improvements implemented and ensure colleague queries around policies and requirements are appropriately answered in a timely manner.
• Be responsible for the Vulnerability Management process.
• Act on vulnerability information and conduct Cyber Security risk assessments and work with suppliers, partners, and internal teams to ensure security vulnerabilities are identified, assessed, and remediated in good time.

Key Requirements you will need:

• In depth knowledge of Information Security concepts and principles, including cloud security capabilities.
• Experience with configuring and utilising security tooling, including SIEM, EDR, vulnerability scanners, CASB, network scanning, DLP.
• Hands-on IT experience with proven expertise in a previous Information Security role.
• Vendor management experience.
• A relevant intermediate or advanced Information Security based qualification (e.g. CISSP, CySA+, MSc Information Security)
• Ability to critically analyse information and make decisions based on judgement, knowledge, and experience.

Business Knowledge:

• Knowledge of Retail and eCommerce is of great advantage but is not essential.
• Working knowledge of the Information Security elements of Data Protection regulations (e.g. GDPR, The Data Protection Act 2018) is essential.
• Knowledge of the NIST Cyber Security Framework is of advantage.
• Awareness of regulations that affect Retail, such as PCI DSS, is of great advantage but experience of maintaining compliance is not essential.

CISSP or CySA+ or MSc Information Security Certifications will be advantageous.

Call 0121 712 8715 today!

Cyber Security Assurance Specialist Preston(Hybrid working) £55-£62k+10% Bonus

My client are Europe's largest Aerospace & Defence organisation.

They are currently looking for an experienced Cyber Security proffesional to join their team based out of their Preston office.

What you will be doing:

* Deliver assurance services to the business, SS EIT, IM&T Sector and Group Functions, covering enterprise systems / services and cloud

* Identification of risk and appropriate mitigations, development & analysis of secure solutions (covering technical / physical / procedural / personnel controls) and assessment of compliance with internal and external standards and regulations

* Deliver documentation to demonstrate compliance to internal and external stakeholders

* Assessment and provision of control effectiveness in managing Cyber security risk

* Provide security architecture / technical input into the development of secure solutions

* Coaching and mentoring junior members of the team

* Support development of strategy and continual service improvement for the Cyber assurance function

* Act as a subject matter expert regarding Cyber assurance activities for the wider organisation

Essential Skills:

* Knowledge of information security standards, such as HMG, NCSC Guidance, ISO 27001/18, NIST 800 etc. HMG is fundamental

* Capable of a very high standard of written communication including experience of writing complex reports and giving formal presentations to senior business peers

* Educated to degree level (or equivalent) preferably in a related discipline (ICT/Computing, Information assurance, risk management, vulnerability/threat assessment) or equivalent, related work experience

* In-depth knowledge of industry standard security policy, standards and good practice guidance and their application to a variety of IT solutions processing protectively marked information

To apply for this role please forward your cv to Peter Bibby on the email address below...

Role Title: IdAM Security Architect

Duration: 6 Months

Location: Remote (some ad-hoc travel to Warrington)

Rate: £680/d - Umbrella only

Applicants MUST be eligible to go through Security Clearance

Would you like to join a global leader in consulting, technology services and digital transformation?

Our client is at the forefront of innovation to address the entire breadth of opportunities in the evolving world of cloud, digital and platforms.

Role purpose / summary

We are looking for a Microsoft Identity/IdAM Architect or Azure Solution Architect with strong IdAM capability.

• Formulating and driving cloud identity strategy encompassing users, devices, Azure resources and applications, interacting with third parties
• Modernising identity solutions with Microsoft cloud
• Designing and implementing hybrid identity solutions
• Implementing identity governance

Key Skills/ requirements

• Eligible for SC clearance
• Azure including RBAC, PIM, AADDS
• Microsoft Entra including B2B as a core requirement, Entra Connect, ID Protection
• Conditional Access Policies

All profiles will be reviewed against the required skills and experience. Due to the high number of applications, we will only be able to respond to successful applicants in the first instance. We thank you for your interest and the time taken to apply!

Senior IT Cyber Security Analyst - CISSP or CySA+ or MSc Information Security

Weymouth, Dorset, or London, South East UK or Stoke on Trent, Staffordshire

£45,000pa + £5,000 Car Allowance, Hybrid & Flexi-Working & Training & Certifications Available

Weymouth, Dorset, or London, South East UK, or Staffordshire + Hybrid and Flexible Working as Standard

The Client: Are a well-known High St and Online retailer who are seeking a Senior IT Cyber Security Analyst who specialises in Microsoft / Wintel Servers and Virtualisation supporting a UK wide infrastructure.

Objective: You will support the Head of Information Security in delivering the Information Security service to the global business.

You will lead all Cyber Security Operations function and be the first point of contact for technical information security related matters.

Role Responsibilities:

• Act as the first point of action or escalation for the identification of security incidents and their investigation.
• Be responsible for the managed Security Operations Centre (SOC), Network Monitoring and Managed Detection and Response services and associated vendor relationships.
• Be the subject matter expert for technical security related queries, providing the Security Architect, IT Service and Delivery teams and business stakeholders with authoritative advice and defined security requirements.
• Be responsible for the Security Education and Awareness scheme.
• Ensure Cyber Security campaigns are conducted, and improvements implemented and ensure colleague queries around policies and requirements are appropriately answered in a timely manner.
• Be responsible for the Vulnerability Management process.
• Act on vulnerability information and conduct Cyber Security risk assessments and work with suppliers, partners, and internal teams to ensure security vulnerabilities are identified, assessed, and remediated in good time.

Key Requirements you will need:

• In depth knowledge of Information Security concepts and principles, including cloud security capabilities.
• Experience with configuring and utilising security tooling, including SIEM, EDR, vulnerability scanners, CASB, network scanning, DLP.
• Hands-on IT experience with proven expertise in a previous Information Security role.
• Vendor management experience.
• A relevant intermediate or advanced Information Security based qualification (e.g. CISSP, CySA+, MSc Information Security)
• Ability to critically analyse information and make decisions based on judgement, knowledge, and experience.

Business Knowledge:

• Knowledge of Retail and eCommerce is of great advantage but is not essential.
• Working knowledge of the Information Security elements of Data Protection regulations (e.g. GDPR, The Data Protection Act 2018) is essential.
• Knowledge of the NIST Cyber Security Framework is of advantage.
• Awareness of regulations that affect Retail, such as PCI DSS, is of great advantage but experience of maintaining compliance is not essential.

CISSP or CySA+ or MSc Information Security Certifications will be advantageous.

Call 0121 712 8715 today!

Public Policy Project Manager

Contract

6 months +

Inside IR35

We are working with a central government department who are looking for a Delivery Project Manager to deliver a new Policy that will change how people recycle plastic in the future. This is one of government largest programmes and will be dealing with multiple internal & external partners to get the policy delivered (expected end of 2025).

Overview of areas you will oversee:

- Benefits Realisation

- Stakeholder Management

- Risks and Issues:

- Governance:

- Assurance:

- Change Management:

Experience requirements

- Experience of working with a diverse group of external stakeholders, and of managing the expectations of external stakeholders

- Experience of operability assessments, and of ensuring guidance to external stakeholders allows them to take the necessary steps to ensure project outcomes are delivered.

A further more detailed spec is available on demand, please send your CV for instant review as they are looking to hire ASAP