Job Description
Security Consultant – Technical Writing
Permanent Opportunity | Australian Government Environment
Looking for immediate joiners
Role available in Melbourne and Adelaide
About the Organisation
Our client is a specialist consulting organisation delivering complex transformation and technology programmes across highly regulated environments.
They are partnering with a major Australian Government organisation undertaking a large-scale infrastructure modernisation initiative spanning cloud, virtualisation, networking, security and end-user computing services.
The Opportunity
An opportunity exists for an experienced Security Consultant – Technical Writing to support the Discovery, Assessment, Design and Planning phases of a significant infrastructure transformation programme.
This is a technically focused security documentation and governance role requiring strong experience in security frameworks, risk management, compliance, accreditation processes and security architecture concepts.
You will own the development, governance and maintenance of critical security documentation while working closely with security architects, technical SMEs and programme stakeholders.
Key Responsibilities
Lead the development and governance of the System Security Plan and Security Controls Alignment Documentation.
Produce risk, compliance and accreditation-support documentation aligned with relevant security frameworks.
Capture and structure security discovery and assessment inputs, including compliance obligations and security baselines.
Maintain controls traceability and alignment between solution designs and security requirements.
Coordinate document reviews, approvals and stakeholder sign-off processes.
Manage documentation governance including version control, change management and audit readiness.
Facilitate workshops and reviews with security architects, SMEs and security stakeholders.
Track security risks, compliance gaps, dependencies and outstanding actions.
Ensure security and compliance considerations are incorporated into transition and migration planning activities.
Deliver high-quality, audit-ready documentation to support programme governance.
Required Skills and Experience
Technical Expertise
Strong understanding of security governance, risk management and accreditation processes.
Knowledge of security controls frameworks including:
ACSC Essential Eight
Information Security Manual (ISM)
CIS Benchmarks
Ability to interpret security architecture artefacts and map controls effectively.
Understanding of:
Infrastructure security
Virtualisation security concepts
Network segmentation and micro-segmentation
Storage security and encryption
Identity and access management
Audit logging and security monitoring
End User Computing / VDI security concepts
Advanced technical and security documentation skills including governance, traceability and controls mapping.
Qualified Experience
Minimum 8+ years' experience in security-focused roles with a strong governance and documentation component.
Demonstrated experience developing and managing System Security Plans and security controls documentation.
Experience supporting accreditation, compliance and governance activities within large-scale technology programmes.
Experience within Australian Government or highly regulated environments will be highly regarded.
Desirable Certifications
IRAP training or assessment experience
CISSP
CISM
ISO ***** Lead Implementer or Lead Auditor
Other recognised security or GRC qualifications
Eligibility Requirements
Australian Citizenship is mandatory.
Must hold or be eligible to obtain an Australian Government security clearance at NV1 minimum.
NV2 clearance is highly desirable.
Baseline clearance holders are not eligible for this opportunity.
What's on Offer
Opportunity to work on a significant national infrastructure transformation programme.
Exposure to complex security, compliance and governance challenges.
Collaborative environment working with senior architects, security specialists and government stakeholders.
Contribute to a high-profile programme operating within a mission-critical environment.
#J-*****-Ljbffr