Security Risk Manager at Thales Australia Limited in Melbourne, Florida

Job Description:

Location: Melbourne, Australia

About Thales

Thales people architect solutions at the heart of the defence-security continuum. Interoperable and secure information and telecommunications systems for defence, security, and civil operators, are based upon innovative use of radiocommunications, networks, and cybersecurity. We are ground breaking new digital technologies such as 4G mobile communications, cryptography, cloud computing and big data for use in physical protection systems, and critical information systems.

We’re inventing the future, right here, right now, at Thales. We design the critical security solutions of tomorrow by combining the curiosity to explore, the intelligence to question and the vision to create. Together we solve complicated problems by combining our experience in the market with our leading research and development capabilities.

Thales is committed to promoting and maintaining a workplace culture of shared respect that enables all of us to feel valued, do our best, and remain truly passionate about the place that we work. We encourage applications from Aboriginal and Torres Strait Islander people and individuals from diverse backgrounds. Talk to us about any support or accessibility requirements you may need and how we support flexibility in the workplace.

Wellbeing matters at Thales, and where possible we encourage a flexible work culture.

Australia has embarked on the most complex transformation of Air Traffic Management (ATM) in its aviation history, a once-in-a-generation opportunity to create a unified solution to Australia’s future ATM needs. The OneSky Australia Program is an unprecedented partnership between Thales, Airservices Australia and The Department of Defence to develop a new integrated civil and military air traffic management system

About Your Role

As Security Risk Manager, you will manage security risks and provide specialised security advice necessary to enable the CMATS (Civilian Military Air Traffic System) project team to devise, develop and maintain reliable, secure, accreditable and economically viable security solutions to meet the needs of Air Services Australia and Defence.

You will be responsible for developing, maintaining the security risk register and developing and supporting implementation of the remediation strategies whenever identified risks are having high business impact on customer operations. In doing this, you will conduct risk analysis, technical studies, vulnerability assessment studies on components, sub-systems with objective to measure the overall impact of the CMATS System of Systems.

• The analysis of security requirements derived from applicable controls & derivation of security risks from non-applicable controls




• The development and analysis of additional security risks not derived from the ISM or eDSM




• The development of a threat model based on an agreed list of threat vectors and actors




• The identification of system, segment, component and product vulnerabilities, their impact onto CMATS and the development of remediation strategies




• The monitoring of the effectiveness of remediation strategies and periodic update of the security risk register




• The production and periodic maintenance of engineering reports




• The production of engineering design artefacts in relation to mitigation strategies




• The contribution to the IVV project including the Certification and Accreditation phases in which the residual security risks are monitored and appropriately tested and controlled using agreed remediation strategies including penetration tests




• The presentation of identified security risks, the analysis conducted to demonstrate effectiveness of proposed risk remediation strategies and proposed solutions to customer representatives during the Security Working Groups (SWG).




• Provide advice to internal and external customers on security risks




• Liaise with the appropriate Federal Government Security Organisation and with customer representatives and certification authorities

How About You?

• Bachelor of Engineering Computer Science, Systems Engineering or related field, or related equivalent experience




• Bachelor of Science in Cyber Forensics, Information Security and Management or related Field or related equivalent experience




• Bachelor of Information Technology, Network Security or related field or related equivalent experience




• Knowledge of IT systems security and software security;




• Experience with hardening of information systems;




• Experience in the conduit of bottom-up risk assessment;




• Knowledge of Australian Government Information Security Manual (ISM) and eDSM;




• Experience with authoring/reviewing technical documentation;




• Strong communications & liaison skills.




• Advanced knowledge of Federal Government Security Risk Management frameworks & knowledge of IT systems security and software security solutions within the Defence environment highly desirable

Good to Know

As a Defence security clearance is required for this role, applicants must be Australian citizens and eligible to obtain and maintain an appropriate clearance.  To learn more about clearances please visit – http://www.defence.gov.au/AGSVA/

You’ll get an email acknowledgement after you’ve applied, Thales strives to provide a personalised experience for all suitable applicants. 

For more information on Thales visit us @ThalesCareers on Instagram

At Thales we provide CAREERS and not only jobs. With Thales employing 80,000 employees in 68 countries our mobility policy enables thousands of employees each year to develop their careers at home and abroad, in their existing areas of expertise or by branching out into new fields. Together we believe that embracing flexibility is a smarter way of working. Great journeys start here, apply now!

Apply Now