IT Security Service Specialist is responsible for providing authoritative advice and guidance in support of DFAT activities. You will monitor and identify security environment market trends and pro-actively carry out assessment of benefits and risk impacts on business strategies, ensuring the adoption of and adherence to standards, and accreditation of complex information systems. You will support the investigation of major breaches of security and provision the authoritative advice and guidance on the requirements for security controls in collaboration with experts in other functions e.g. legal, technical support and policy. You will require comprehensive knowledge of IT security and be willing to challenge yourself in meeting the demands of the role, in an ever-changing operational environment. The successful candidate will be required to: -Deliver security architecture, design, accreditation -Deliver IT security capability development -Deliver IT security vulnerability management -Deliver IT security continuous assessment and security control validation model -Provision of authoritative advice and guidance on security strategies -Management of identified risks -Obtain and act on vulnerability information by conducting security risk assessments and business impact analysis -Recommend appropriate control improvements -Ensures architectural principles are applied during design to reduce risk and drive adoption and adherence to policy, standards and guidance The successful candidate will have the following skills and experience: -Extensive experience in application development, application security such as OWASP and SecDevOps tools -Extensive demonstrated experience working in IT Security within Australian Government environment -Relevant tertiary or comparable qualifications in IT, Systems Engineering or related field will be highly regarded -Demonstrated knowledge of and experience in the application of the Information Security Manual (ISM) and the Protected Security Policy Framework (PSPF) -Experience working in Agile multidisciplinary development teams is desirable -Relevant industry certifications such as CISSP, IRAP and SABSA would be highly regarded