This is a 2026 step-by-step pathway guide for a Cyber Security Architect migrating to Australia under ANZSCO 262117. 262117 is on MLTSSL and CSOL — the full skilled visa stack: Subclass 189 Independent, Subclass 190 State-Nominated, Subclass 491 Regional Provisional → 191 PR, Subclass 186 Direct Entry, Subclass 494 Regional Employer → 191, and Subclass 482 Core Skills → 186 TRT.
For the cost / timeline view see the 262117 cost & timeline case study. For ACS document details see the skills assessment guide.
Step 1 — Confirm 262117 is the right code
ANZSCO 262117 covers cyber security architecture work — designing security reference architectures, zero-trust transition strategy, IAM / PAM architecture, secure cloud landing zones (AWS / Azure / GCP), data protection architecture, segmentation / micro-segmentation strategy, and authoring high- and low-level security designs (HLD / LLD) reviewed at architecture review boards (ARB). Use ANZSCO search to verify against 262112 ICT Security Specialist (broader advisory), 262114 Cyber GRC (governance), 261315 Cyber Security Engineer (engineer), and 262115 Cyber Advice and Assessment.
The cleanest 262117 fit is the enterprise / solution architect with cyber specialisation — owning architecture artefacts (HLDs, LLDs, reference patterns) and presenting them to ARB / TDA forums. If you spend most of your time in security advisory rather than design, 262112 fits better.
Step 2 — ACS skills assessment
ACS (acs.org.au) assesses ICT qualifications. Pathways:
- Skills Assessment — Major in ICT — bachelor / master ICT or cybersecurity-aligned + ANZSCO match: 2 years deducted.
- Skills Assessment — Minor in ICT — partial ICT subjects: 4-5 years deducted.
- RPL — non-ICT-aligned candidates with 6+ years experience.
Reference letters must show architecture work — design artefacts authored, ARB submissions presented, reference patterns produced. Generic "supported security team" language won't pass.
Step 3 — English
EOI lodgement requires Competent English. For points-tested visas, target Proficient (10 pts) or Superior (20 pts). Architects are judged on written and spoken communication — ARB defence, design papers, executive briefings — Superior English is the realistic target for senior architect roles.
Step 4 — Choose a visa pathway
Subclass 189 Independent
Best for senior architects with 10+ years experience, Superior English. See Subclass 189.
Subclass 190 State-Nominated
+5 points. NSW (Sydney CBD financial services), VIC (Melbourne corporates), ACT (federal architecture roles), and QLD (Brisbane bank) all nominate. See Subclass 190.
Subclass 491 → 191 (regional)
+15 points. Newcastle, Wollongong, Geelong, Adelaide, Hobart, Canberra, Perth — substantial regional architect demand. See Subclass 491.
Subclass 186 Direct Entry
Banks (CBA, Westpac, ANZ, NAB) sponsor architects under APRA CPS 234 / CPS 230. Insurers (IAG, Suncorp, QBE) and major corporates (Telstra, Optus, Woolworths, Coles, Wesfarmers) hire experienced cyber architects. Big-4 (Deloitte, EY, PwC, KPMG) and boutique consultancies (CyberCX, Tesserent, Trustwave, Mandiant) sponsor for client-facing architecture work. See Subclass 186.
Subclass 482 → 186 TRT / Subclass 494
482 Core Skills for 4 years employer-tied work. 494 for 5-year regional sponsorship → 191. See Subclass 482 and Subclass 494.
Step 5 — Score your points
Use the points calculator. Senior architects with 10+ years skilled employment, Superior English, and partner skills points routinely reach 95-100 points.
Step 6 — Submit EOI / lodge
Lodge an EOI through SkillSelect for 189/190/491. For 186/494/482, the employer's sponsorship + nomination is lodged first.
Useful tools
- Visa fee calculator
- Document checklist — ACS evidence pack
- Eligibility wizard
- Invitation rounds tracker
- State nomination tracker
Authoritative sources
Next step
Want to map your security architect profile against 189 vs 190 vs 491 vs 186 vs 494 vs 482? Book a 30-minute free strategy call.