IRAP System Security Plan (SSP) Consultant
Up to $1,000 per day
Contract, ASAP start
Remote anywhere on the east coast, Melbourne preferred
Baseline clearance required

The chance

We're partnering with a global information management organisation. Their IRAP reassessment is scheduled for Q3 next year. They need an experienced security compliance specialist to get their System Security Plan in shape well before then.

You'll review the outcomes of the last assessment and update the SSP. You'll also work through an annex of more than 1,000 controls and pull in the ones relevant to remediation. Finally, you'll map the system against the latest government control requirements so nothing is missed when the IRAP assessor arrives.

You'll report to the security lead and work with teams in the US, UK and India, so you'll need to communicate clearly across time zones.

What you'll be doing
Reviewing the previous IRAP assessment report and findings, and turning them into a clear remediation picture
Updating the SSP and its control annex to reflect the current system, risks and environment
Assessing whether each of the 1,000+ controls applies, and documenting implementation status and evidence




Aligning the SSP with updated Australian Government control requirements (ISM and related frameworks)
Working with teams in the UK and India to gather evidence and track remediation
Preparing the system and documentation for the upcoming IRAP reassessment

What you'll bring
Current Australian Government Baseline clearance (essential)
Hands-on experience writing and maintaining System Security Plans for government systems
Solid working knowledge of the ISM, plus exposure to PSPF and Essential Eight
Experience supporting IRAP assessments or reassessments, including remediation planning
The patience and rigour to work through a very large control set accurately
Confident stakeholder skills with distributed, international teams

Nice to have
IRAP Assessor endorsement, or experience working closely with assessors
A background with outsourced or managed service providers
Exposure to records, data or information management settings

Apply

This one is moving quickly. Apply now for more info.

At Randstad Digital, we are passionate about providing equal employment opportunities and embracing diversity to the benefit of all. We actively encourage applications from any background.

📌 Irap Security Consultant Melbourne
🏢 Randstad Digital
📍 Melbourne