IRAP System Security Plan (SSP) Consultant

Up to $1,000 per day

Contract, ASAP start

Remote anywhere on the east coast, Melbourne preferred

The opportunity We're partnering with a global information management organisation. Their IRAP reassessment is scheduled for Q3 next year. They need an experienced security compliance specialist to get their System Security Plan in shape well before then.

You’ll review the outcomes of the last assessment and update the SSP. You'll also work through an annex of more than 1,000 controls and pull in the ones relevant to remediation. Finally, you'll map the system against the latest government control requirements so nothing is missed when the IRAP assessor arrives.

You'll report to the security lead and work with teams in the US, UK and India, so you'll need to communicate clearly across time zones.

What you’ll be doing

Reviewing the previous IRAP assessment report and findings, and turning them into a transparent remediation picture

Updating the SSP and its control annex to reflect the current system, risks and environment

Assessing whether each of the 1,000+ controls applies, and documenting implementation status and evidence





Aligning the SSP with updated Australian Government control requirements (ISM and related frameworks)

Working with teams in the UK and India to gather evidence and track remediation

Preparing the system and documentation for the upcoming IRAP reassessment

What you’ll bring

Current Australian Government Baseline clearance (essential)

Hands-on experience writing and maintaining System Security Plans for government systems

Strong working knowledge of the ISM, plus exposure to PSPF and Essential Eight

Experience supporting IRAP assessments or reassessments, including remediation planning

The patience and rigour to work through a very large control set accurately

Confident stakeholder skills with distributed, international teams

Nice to have

IRAP Assessor endorsement, or experience working closely with assessors

A background with outsourced or managed service providers

Exposure to records, data or information management environments

At Randstad Digital, we are passionate about providing equal employment opportunities and embracing diversity to the benefit of all. We actively encourage applications from any background.

📌 IRAP Security Consultant (Canberra)
🏢 Randstad
📍 Canberra