Product Cyber Security Lead

About this role

Product Cybersecurity Lead | Adelaide, South Australia

Our client is an Adelaide-based manufacturer specialising in the design, engineering, and local manufacture of advanced platforms and systems.

They operate a large-scale production facility with 80+ engineers and technical staff and hold active programme partnerships. Everything they build is sovereign, made in Australia, and designed for real operational deployment.

This is a greenfield product security role created to own and drive the security of our client's platform ecosystem from scratch. There is no existing framework, no documentation, and nobody currently looking after this. You will be the first.

This is not a governance role. It is a technical product security role inside an active engineering-led manufacturer.

What You Will Own

Product & Platform Security

• Own the cybersecurity of all defence platforms including embedded systems, firmware, communications, navigation software, and control links
• Drive secure design principles through the engineering lifecycle from concept to operational deployment
• Lead product certification and cyberworthiness against defence frameworks and contract obligations
• Implement anti-tamper controls, vulnerability management, and supply chain security across all platforms
• Embed security-by-design into the engineering process from day one rather than treating it as an afterthought

Governance & Documentation

• Build security policies, frameworks, and artefacts from scratch aligned to doctrine and contractual obligations
• Develop and maintain the full suite of security documentation including System Security Plans, Security Risk Management Plans, and assessment artefacts
• Drive the DISP accreditation process in collaboration with the broader security function

What We Are Looking For

• A defence background is essential. You understand what cyberworthiness means, what compliance looks like in practice, and what it takes to certify a platform without being told
• Hands-on technical depth in product security, embedded systems, firmware, and secure communications on a physical platform
• Experience with ISM, DSPF, and defence-specific security frameworks applied operationally not theoretically
• Familiarity with Assessment and Authorisation processes and the artefacts required to achieve

Authority to Operate

• A self-starter who can build from nothing without a team to lean on, at least in the short to medium term
• Security clearance held or strong eligibility
• Relevant certifications such as CISSP, OSCP, CEH, GIAC, or embedded security qualifications are valued
• If you have also secured enterprise IT environments and internal networks, that is a significant advantage and will be reflected in the offer

If interested, please reach out with your most up-to-date CV & I’ll be in touch.

About cyber security & digital forensics roles for ex-police

Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.