Cyber Security Architect

We are excited to introduce an opportunity for an experienced and strategic Cyber Security Architect to join Downer’s Group Technology function within our Security Engineering & Platforms team.

Reporting to the Application Security Manager, this role is suited to a highly capable cyber security professional who can design, review and guide secure technology solutions across complex enterprise environments.

You will play a key role in embedding secure-by-design principles across applications, cloud services, platforms, infrastructure and data environments. Working closely with Cyber Security, Enterprise Architecture, Technology, Risk, business stakeholders and strategic partners, you will ensure technology solutions align with Downer’s cyber strategy, security policies, architecture principles and risk appetite.

Operating within a product-led DevOps technology model, you will support teams across the full technology lifecycle, from strategy and technical design through to build, release and run.

This role can be based in our Sydney (North Ryde), Melbourne (Collins Street) or Brisbane (Milton) offices.

About the Role 

In this role, you will:  

• Provide cyber security architecture advice across applications, platforms, cloud services, infrastructure and data environments.    

• Review solution designs, architecture artefacts, technology changes and project documentation to identify security risks and control requirements.
• Define reusable security architecture patterns, guardrails, standards and design principles that enable secure-by-design delivery.
• Translate security requirements, vulnerabilities and threat information into practical design recommendations and remediation actions.
• Work with Enterprise Architecture, Application Security, Cloud, Data, Cyber Defence and Governance, Risk and Compliance teams to align security outcomes.
• Provide security input into risk assessments, control exceptions, remediation plans and technology risk decisions.
• Support architects, delivery teams and strategic partners to implement practical and sustainable security controls.
• Contribute to architecture governance forums, security standards, design reviews and cyber security reporting.
• Build cyber security capability through knowledge sharing, coaching and clear technical guidance.
• Communicate technical control gaps and security risks clearly to both technical and non-technical stakeholders.

This is a highly influential role where you will help shape secure technology outcomes while balancing cyber security, operational continuity, cost and business impact.

Our Ideal Candidate

You are an experienced Cyber Security Architect with strong technical judgement and the ability to assess complex technology designs through a risk-based lens.

You are confident working across technical and business teams and can translate complex security concepts into clear, practical recommendations. You build trusted relationships, influence stakeholders effectively and remain comfortable making decisions in complex or ambiguous situations.

What You Will Bring 

Bachelor’s degree in cyber security, computer science, information technology, management information systems or equivalent practical experience.

• 7+years commercial experience in information technology or cyber security, with relevant experience in the role domain.
• Demonstrated working knowledge of NIST standards, ISO/IEC 27001, ASD Essential Eight and cyber security controls.
• Relevant Professional certifications such as CISSP, CISM, CISA, CRISC, CompTIA Security+ or equivalent are desirable.
• ITIL Foundation or equivalent service management experience is desirable. 
• Security architecture, cloud security, application security or enterprise architecture certifications are desirable.
• Experience delivering cyber security architecture advice in complex enterprise environments.
• Experience reviewing solution designs, architecture artefacts, technical changes and security exceptions.
• Experience with application, cloud, data, identity, endpoint and infrastructure security controls.
• Experience translating threat, vulnerability and control information into architecture requirements.
• Experience influencing stakeholders and suppliers to adopt secure-by-design outcomes. 

Benefits Of Working with Downer

•  Work with an ASX listed company, working with market leaders.

• Grow your career with us, we are passionate about giving our people opportunities to grow through personal and professional development and continuous learning: 
  • Professional development programs 
    • Access to professional memberships and industry networks
• Be part of a team that cares, we foster a work environment built on support that is flexible around our employee’s wellbeing needs: 
  • Flexible work arrangements 
    • Parental leave
    • Employee Assistance Program
    • Programs promoting diversity and inclusion
• A range of Corporate Benefits, including:  
  • Discounted services (car hires, hotels, insurance, retail stores, gyms) 

Why Downer?

As a trusted name in infrastructure, transport, facilities management, and construction, Downer is committed to delivering projects that create a lasting, positive legacy. We’re committed to building a team that reflects the diverse communities we serve, and we welcome people of all ages, genders, sexual orientations, cultures, abilities, and lived experiences. We especially encourage applications from those whose voices have traditionally been underrepresented in our industry, including women, Aboriginal and Torres Strait Islander Peoples, Māori and Pasifika Peoples, veterans, people with disability, and neurodivergent individuals.  

Even if your experience doesn’t align perfectly with this role, we’d still like to hear from you. If it feels like the right fit, apply - potential counts, and so do you.

As a WORK180 Endorsed Employer, we support flexibility that works for your life, inclusive leadership that values your voice, and equitable access to opportunity so you can do your best work and bring your whole self to it.