Permanent Opportunity | Australian Government Environment
Looking for immediate joiners
Role available in Melbourne and Adelaide
About the Organisation
Our client is a specialist consulting organisation delivering complex transformation and technology programmes across highly regulated environments. They are partnering with a major Australian Government organisation undertaking a large-scale infrastructure modernisation initiative spanning cloud, virtualisation, networking, security and end-user computing services.
The Opportunity
An opportunity exists for an experienced Security Consultant – Technical Writing to support the Discovery, Assessment, Design and Planning phases of a significant infrastructure transformation programme.
This is a technically focused security documentation and governance role requiring strong experience in security frameworks, risk management, compliance, accreditation processes and security architecture concepts. You will own the development, governance and maintenance of critical security documentation while working closely with security architects, technical SMEs and programme stakeholders.
Key Responsibilities
- Lead the development and governance of the System Security Plan and Security Controls Alignment Documentation.
- Produce risk, compliance and accreditation-support documentation aligned with relevant security frameworks.
- Capture and structure security discovery and assessment inputs, including compliance obligations and security baselines.
- Maintain controls traceability and alignment between solution designs and security requirements.
- Coordinate document reviews, approvals and stakeholder sign-off processes.
- Manage documentation governance including version control, change management and audit readiness.
- Facilitate workshops and reviews with security architects, SMEs and security stakeholders.
- Track security risks, compliance gaps, dependencies and outstanding actions.
- Ensure security and compliance considerations are incorporated into transition and migration planning activities.
- Deliver high-quality, audit-ready documentation to support programme governance.
Required Skills and Experience
Technical Expertise
- Strong understanding of security governance, risk management and accreditation processes.
- Knowledge of security controls frameworks including:
- ACSC Essential Eight
- Information Security Manual (ISM)
- CIS Benchmarks
- Ability to interpret security architecture artefacts and map controls effectively.
- Understanding of:
- Infrastructure security
- Virtualisation security concepts
- Network segmentation and micro-segmentation
- Storage security and encryption
- Identity and access management
- Audit logging and security monitoring
- End User Computing / VDI security concepts
- Advanced technical and security documentation skills including governance, traceability and controls mapping.
Professional Experience
- Minimum 8+ years' experience in security-focused roles with a strong governance and documentation component.
- Demonstrated experience developing and managing System Security Plans and security controls documentation.
- Experience supporting accreditation, compliance and governance activities within large-scale technology programmes.
- Experience within Australian Government or highly regulated environments will be highly regarded.
Desirable Certifications
- IRAP training or assessment experience
- CISSP
- CISM
- ISO 27001 Lead Implementer or Lead Auditor
- Other recognised security or GRC qualifications
Eligibility Requirements
- Australian Citizenship is mandatory.
- Must hold or be eligible to obtain an Australian Government security clearance at NV1 minimum .
- NV2 clearance is highly desirable.
- Baseline clearance holders are not eligible for this opportunity.
What's on Offer
- Prospect to work on a significant national infrastructure transformation programme.
- Exposure to complex security, compliance and governance challenges.
- Collaborative environment working with senior architects, security specialists and government stakeholders.
- Contribute to a high-profile programme operating within a mission-critical environment.