Our client, an Australian technology consultancy, is seeking an experienced, ASD-endorsed IRAP assessor to deliver IRAP assessments for its government and provider-to-government customers. The consultant will lead assessment delivery as an individual contributor, working alongside the client’s cyber security and GRC team.
The consultant will bring deep knowledge of the Information Security Manual (ISM) and Australian Government security frameworks to the engagement. They will run assessments from scoping through to final reporting and work closely with customer stakeholders to give them transparent, practical security advice.
Key responsibilities
Lead and deliver IRAP assessments of ICT systems and cloud services for government customers and providers to government
Assess systems against the ISM, the Protective Security Policy Framework (PSPF) and related federal government security directives
Produce transparent, high-quality security assessment reports and control assessments, and recommend how to fix any weaknesses found
Provide advice on ISM and PSPF implementation, the Essential Eight and related compliance needs
Engage customer stakeholders and build trusted working relationships throughout each assessment
Manage conflict of interest declarations and meet ASD’s IRAP policy and quality assurance requirements
Support related GRC work as needed, such as risk assessments, vendor assurance reviews and maturity assessments
Your background
Current ASD IRAP assessor endorsement, with the ability to deliver IRAP work from day one (essential)
Current NV1 security clearance or higher
7 to 15 years’ experience in cyber security, with a solid track record of delivering IRAP assessments
Extensive knowledge of the ISM and experience applying it, ideally including cloud environments
Working knowledge of the PSPF, the Essential Eight and related government frameworks such as the DSPF and DISP
Strong written and verbal communication skills, with experience presenting findings to senior stakeholders