CYBER SECURITY DOCUMENT WRITER

Role Title: Security Document Writer

Discipline: Systems and Software Engineering – System Security

Skill Level: Level 2

Location: Canberra, ACT

Working Arrangements: In office – ACT-based candidates only An Australian Government Security Clearance is required for this position.

Role Overview

BRG is seeking an experienced Security Document Writer to support security accreditation and certification activities across Defence ICT systems and capabilities.

The role will focus on developing, reviewing and maintaining comprehensive security documentation to support system accreditation, risk management and compliance with Australian Government security requirements.

The successful candidate will work closely with Certification Consultants, System Managers, ICT teams and security stakeholders to develop security assurance documentation, identify cyber security risks and support the ongoing security and operational readiness of Defence systems.

Key Responsibilities The successful candidate will:

- Develop and maintain security accreditation and certification documentation, including:
- System Security Plans (SSPs).
- Security Risk Management Plans (SRMPs).
- System Overviews.
- Incident Response Plans (IRPs).
- Additional security assurance documentation as required.

- Provide information security advice and documentation support to assigned ICT programs and projects.
- Review security policies, procedures and technical documentation for compliance with Government security requirements.
- Support the assessment and auditing of implemented security controls.
- Identify, analyse and document information security risks,



vulnerabilities and compliance gaps.
- Assess security exceptions, software vulnerabilities and design weaknesses.
- Support Defence stakeholders in understanding and mitigating cyber security risks.
- Ensure documentation aligns with the ASD Information Security Manual (ISM) and Protective Security Policy Framework (PSPF).
- Collaborate with Certification Consultants, System Managers and technical teams to support accreditation outcomes.
- Maintain accurate records and security documentation in accordance with Defence requirements.

Essential Experience And Capabilities

Candidates should demonstrate

- Experience developing cyber security documentation and accreditation artefacts.
- Strong understanding of security certification, accreditation and assurance processes.
- Experience preparing security risk assessments, System Security Plans and related documentation.
- Knowledge of the Australian Government ISM and PSPF.
- Experience reviewing and assessing security controls, policies and procedures.
- Understanding of information security risk management and vulnerability assessment.
- Strong technical writing, documentation and analytical skills.
- Ability to communicate effectively with ICT engineers, cyber security specialists and Defence stakeholders.




- Ability to work collaboratively within small, multidisciplinary teams.
- Relevant industry-standard qualifications in information security, cyber security or a related discipline.

Highly Desirable Experience The following would be highly regarded:
- Experience supporting Defence ICT systems and applications.
- Strong background in cyber security and risk management.
- Knowledge of networking, computer systems and operating systems.
- Experience supporting Defence security accreditation and certification activities.
- Project management experience.
- Experience working within Defence, CASG or other Australian Government ICT environments.

ITAR Compliance Requirements The role requires compliance with applicable International Traffic in Arms Regulations (ITAR), as the successful candidate will require access to ITAR-controlled information and/or equipment.

Candidate Profile

This opportunity would suit an experienced Cyber Security Documentation Specialist, Security Assurance Analyst, Cyber Security Consultant, Security Accreditation Specialist or Security Technical Writer with a strong understanding of Defence cyber security requirements.

The strongest candidates will combine practical experience developing SSPs, SRMPs, security accreditation documentation and risk assessments with knowledge of ISM, PSPF, security controls and Defence ICT environments.

The role requires someone capable of translating complex technical and security information into clear, accurate and compliant documentation to support Defence certification and accreditation activities.

📌 Security Document Writer (Canberra)
🏢 Business Review Group
📍 Canberra