The Role

The EL1 Cybersecurity Assessor for AA is responsible for the delivery of cybersecurity assessments and assessment of ICT systems, whilst managing a number of cybersecurity assessors.

Key Duties involve:

• Guidance to team members in security standards and regulations, such as the Information Security Manual (ISM) and the Protective Security Policy Framework (PSPF).
• Accountable for managing and leading a team, including providing clear and consistent communication, setting clear performance and behavioural standards, managing performance, delegating responsibility and guiding and developing people.
• Demonstrating interpersonal skills to foster and promote a positive and inclusive workplace culture that aligns with ASD values.

The EL1 for MEG is responsible for leading a team that:

• Develops advice to inform and harden high assurance devices, based on in-depth evaluation and system architecture.
• Performs technical assessments, threat modelling and vulnerability management across a large selection of varied and state-of-the-art technologies.
• Deliver bespoke technical security guidance to our customers designed to prevent adversaries from using their tradecraft.
• Engages with Defence projects and multinational vendors supporting the Australian High Assurance Evaluation environment.

About the Team

This information pack details information on two position titles at ASD’s Assessment and Authorisation (AA) and Mitigation Evaluation and Governance (MEG) sections.

ASD’s AA section conducts assurance activities of classified systems to support authorised operation of such systems as defined in the Protective Security Policy Framework (PSPF). In performing these assurance activities, we conduct threat modelling, risk assessments and provide guidance on various security topics to our stakeholders, leading to authorisations of these systems.

ASD’s MEG section provides technical advice and evaluations in relation to the use of High Assurance (HA) products and Common Criteria (CC) standards.

ASD’s AA and MEG teams play a significant role in allowing our stakeholders to operate classified systems in a secure manner. It is a multidisciplinary team with diverse skills, background and experience, comprised of people who have joined from industry and government. The team values collaboration, knowledge sharing, creativity in thinking and perseverance. All team members are supported in ongoing professional development and training, and provided opportunities to develop skillsets to keep pace with evolving priorities and technological advancements. Successful applicants may also have opportunities to travel. The team culture supports flexible work practices so that people can balance their work and what is important to them outside of work.

Our Ideal Candidate

Our ideal candidates will have:

• Experience in leading & delivering ICT cybersecurity assessments.
• Strong experience in security standards and regulations, such as the Information Security Manual (ISM), Essential Eight and the Protective Security Policy Framework (PSPF).
• Managing allocated resources, setting work priorities and managing workflows to ensure accurate completion of work within timeframes and quality requirements.
• Ability to fulfil supervisory duties including proactively developing and mentoring the cybersecurity assessment workforce.
• Experience leading a geographically dispersed workforce, including building cohesive teams and managing remote staff.

ASD is seeking applicants to fill current and anticipated vacancies and to create a merit pool for future vacancies. In line with the Australian Public Service Commissioner’s Direction 2022, upon completion of the recruitment activity, the merit pool will be available to locations across Australia.

Application Closing Date: Sunday 12 October, 2025

For further information please review the job information pack, reference ASD/07810/25 on Careers | Australian Signals Directorate.