Practitioner

Mapping

• Public service levels: A05-8
• SFIA: 3-5
• Leadership competencies for Queensland – Individual contributor; Program leader

Note: Security architect applies more to A07-A08; very unusual to see roles advertised at A05-6.

SFIA professional skills

• Consultancy CNSL
• Enterprise and business architecture STPL
• Information security SCTY
• Solution architecture ARCH
• Specialist advice TECH

Competencies

• How to embed cyber security principles into enterprise solution designs.
• How to ensure application and infrastructure compliance with security policies and standards.
• How to deliver expert security advice to stakeholders through effective communication methods.
• How to analyse risks and devise strategies for threat mitigation and security enhancements.
• How to mentor colleagues in cybersecurity and foster a collaborative security-focused culture.

70:20:10 examples

70: Suggested experiential learning

• Contribute to security strategy and roadmaps.
• Set standards and procedures.
• Conduct reviews and testing.
• Review emerging technologies.

20: Suggested professional development

• Mentor and coach team members and peers.
• Volunteer at industry events.
• Develop skills in areas of interest to become a subject matter expert e.g. networks, identify and access management, application, cloud.
• Collaborate with other security architect practitioners e.g. share best practices and learning.

10: Example formal learning

• Relevant bachelor’s degree
• AWS Certified Security - Specialty
• Certified Cloud Security Professional (CCSP)
• CISSP – Certified Information Systems Security Professional
• Essential 8 Assessment Course
• ISACA Certified Information Systems Auditor (CISA)
• Microsoft SC-100: Microsoft Cybersecurity Architect
• SABSA Chartered Security Architect – Foundation Certificate (SCF)
• SANS GIAC Cloud Security Architecture and Design (GCAD)
• The Open Group Architecture Framework (TOGAF) Foundation Certification

Last updated:

30 June 2025