Cyber Security Consultant

Title: Cyber Security Consultant Shape the future of critical infrastructure security   Are you passionate about helping organisations tackle complex cyber security challenges in some of Australia's most significant projects?

We're   looking for a   Cyber Security Consultant   to join our growing Security team and play a key role in delivering advisory and assurance services across major infrastructure, technology, and critical asset environments. This role will initially focus on supporting a large-scale transport infrastructure project,   providing   an exciting opportunity to influence security outcomes on a high-profile, nationally significant program.     You'll   work alongside industry experts, project leaders, engineers, and client stakeholders to ensure cyber security is embedded into projects from concept through to delivery. Whether   you're   assessing cyber risks, advising on secure architecture, supporting compliance activities, or helping clients navigate evolving regulatory requirements,   you'll   be trusted to provide practical, value-driven advice that makes a real difference.

As a Cyber Security Consultant,   you'll   partner with clients and project teams to   identify , assess, and manage cyber security risks while delivering high-quality consulting services that support business, regulatory, and operational   objectives .     Your day-to-day may include:   Advising clients on cyber security strategy, governance, risk, and compliance initiatives.   Supporting the delivery of a major transport infrastructure project by providing cyber security   expertise   throughout the project lifecycle.   Conducting cyber security risk assessments, threat modelling exercises, and security reviews.   Providing security architecture and secure-by-design guidance across enterprise, cloud, hybrid, and operational technology environments.   Assessing compliance against recognised frameworks and standards including:     Essential Eight   Information Security Manual (ISM)   PSPF   ISO 27001   NIST Cybersecurity Framework   Critical Infrastructure security obligations   Developing security recommendations, roadmaps, remediation plans, and assurance reports.   Participating in design workshops, technical reviews, and stakeholder engagement activities.   Presenting findings and recommendations to both technical and executive audiences.   Collaborating with multidisciplinary project teams to deliver successful project outcomes.   Supporting business growth through client engagement, proposal development, and identification of new opportunities.   Contributing to the ongoing development of cyber security methodologies, tools, and best practices.

We're   interested in individuals who combine strong technical capability with excellent communication and stakeholder engagement skills.     You'll   likely bring :   Experience delivering cyber security consulting, advisory, risk, compliance, or assurance services.   Knowledge of cyber security frameworks, standards, and regulatory requirements.   Experience conducting cyber security risk assessments and developing practical risk treatment strategies.   Understanding of security architecture principles and secure-by-design approaches.   Ability to analyse complex problems and communicate security concepts clearly to diverse audiences.   Strong stakeholder management and relationship-building skills.   A collaborative mindset and a passion for helping clients achieve positive security outcomes.   Experience working within critical infrastructure, transport, utilities, government, defence, operational technology (OT), or complex technology environments will be highly regarded.   Why KBR?     At KBR, your work goes beyond compliance—it contributes directly to protecting Australia’s national interests.   You’ll   benefit   from: