Job Title: BMS Security – Sustainment & Support SME
Project: LAND 4140 BMS
Location: Canberra (Onsite)
Clearance: NV2 (NV1 may be considered) About the Role
The BMS Security – Sustainment & Support SME supports the LAND 4140 Battlefield Management System (BMS) program, focusing on system security across sustainment and support elements.
This role is responsible for delivering cyber security assurance, risk mitigation, and compliance across the capability lifecycle, ensuring alignment with Defence security frameworks and operational requirements.
Key Responsibilities
* Develop and implement system security measures across sustainment and support functions
* Identify and manage cyber security risks and mitigation strategies
* Provide technical assurance including:
o Verification of system security requirements
o Security documentation review and updates
o Threat modelling
o Security architecture input
o Certification and compliance documentation
* Ensure alignment with Cyber Supply Chain Risk Management (CSCRM) frameworks
* Analyse and update Functional Performance Specifications (FPS)
* Review requirements using DOORS and related Defence artefacts
* Conduct assessments of management, operational, and technical security controls
* Define and manage secure acquisition approaches across the system lifecycle
* Support delivery of cyber security programs in line with Defence policies and frameworks
* Contribute to security governance frameworks and policy development
* Ensure compliance with:
o Information Security Manual (ISM)
o Defence Security Principles Framework (DSPF)
* Conduct security risk assessments, vulnerability analysis, and business impact assessments
* Identify and resolve ongoing security issues and constraints
* Support development of security work packages, including:
o Vulnerability identification and mitigation strategies
o Contributions to system architecture and integration documentation
* Build and maintain strong relationships with stakeholders, security teams, and project leadership
Key Experience & Skills
* Strong experience in cyber security within Defence environments
* Ability to operate effectively in complex, high-risk environments
* Experience in:
o Security capability requirement analysis
o Certification & Accreditation (C&A) processes
o Cyber security test & evaluation
o Procurement support (SOW/SOR development and evaluation)
* Ability to:
o Investigate and resolve system security defects
o Provide technical recommendations and risk mitigation strategies
o Communicate complex technical concepts clearly (written and verbal)
* Strong understanding of DCIAB processes (desirable)
* Proven ability to manage competing priorities and deliver outcomes independently
Essential Requirements
* Postgraduate qualification in Cyber Security, ICT, or related discipline (or equivalent experience)
* NV2 Security Clearance (NV1 considered for strong candidates)
* 8+ years' experience in cyber security / information security roles
* Strong knowledge of:
o PSPF (Protective Security Policy Framework)
o ISM (Information Security Manual)
o DSPF (Defence Security Principles Framework)
* Excellent communication and stakeholder engagement skills
Highly Desirable Experience
* Experience within CASG / Defence project environments
* Experience on Defence ICT or communications programs
* Knowledge of:
o ITIL, DevOps, DevSecOps
o Vulnerability assessment methodologies
o Risk management and information assurance
* Experience with:
o DOORS and Defence requirements documentation
o Foreign Military Sales (FMS) processes
o One Defence Capability System (ODCS)
Certifications (Desirable)
* CISSP (Certified Information Systems Security Professional)
* CISM (Certified Information Security Manager)
* CISA (Certified Information Systems Auditor)
* SABSA (Security Architecture Certification)
* Cloud Certifications (AWS, Azure)