Our client, an Australian technology consultancy, is seeking an experienced, ASD-endorsed IRAP assessor to deliver IRAP assessments for its government and provider-to-government customers. The consultant will lead assessment delivery as an individual contributor, working alongside the client’s cyber security and GRC team.
The consultant will bring deep knowledge of the Information Security Manual (ISM) and Australian Government security frameworks to the engagement. They will run assessments from scoping through to final reporting and work closely with customer stakeholders to give them clear, practical security advice.
Key responsibilities
- Lead and deliver IRAP assessments of ICT systems and cloud services for government customers and providers to government
- Assess systems against the ISM, the Protective Security Policy Framework (PSPF) and related federal government security directives
- Produce transparent, high-quality security assessment reports and control assessments, and recommend how to fix any weaknesses found
- Provide advice on ISM and PSPF implementation, the Essential Eight and related compliance needs
- Engage customer stakeholders and build trusted working relationships throughout each assessment
- Manage conflict of interest declarations and meet ASD’s IRAP policy and quality assurance requirements
- Support related GRC work as needed, such as risk assessments, vendor assurance reviews and maturity assessments
Your background
- Current ASD IRAP assessor endorsement, with the ability to deliver IRAP work from day one (essential)
- Current NV1 security clearance or higher
- 7 to 15 years’ experience in cyber security, with a strong track record of delivering IRAP assessments
- Extensive knowledge of the ISM and experience applying it, ideally including cloud environments
- Working knowledge of the PSPF, the Essential Eight and related government frameworks such as the DSPF and DISP
- Strong written and verbal communication skills, with experience presenting findings to senior stakeholders