Australian Signals D....
Australian Signals Directorate ASD certified IRAP Assessors - Contract Canberra Brisbane Adelaide Melbourne
العربية
Australian Signals Directorate ASD certified IRAP Assessors - Contract Canberra Brisbane Adelaide Melbourne
Posted on :
09-02-2024
Employer Active
1 Vacancy
The job posting is outdated and position may be filled
Job Alert
You will be updated with latest job alerts via emailValid email field required
Send jobs
Job Alert
You will be updated with latest job alerts via emailValid email field required
Send jobs
Job Description
Req ID : 2518820
Urgent requirement of Australian Signals Directorate (ASD) certified IRAP Assessors Contract Canberra / Brisbane / Adelaide / Melbourne
Requirements
An IRAP Assessor is a certified Security Analyst role required to understand assess and communicate cyber security controls protecting Government ICT Systems so informed decisions can be made regarding associated cyber security risk.
The IRAP Assessors will be required to assess and document system security controls to meet the Protective Security Policy Framework (PSPF) and Information Security Manual (ISM) requirements on behalf of the Agency and shared services partners.
The assessors will be required to undertake Agency system authorisation documentation and risk statements when there is no conflict of interest with an IRAP assessment. It is a Government and Agency requirement that certain critical systems undergo an independent security assessment conducted by an IRAP Assessor.
They will provide an independent security assessment report (commonly referred to as an IRAP report) which is used to assess a systems suitability and risk. The IRAP Assessor must be certified by ASD and is required to prove their experience and qualifications.
Key Responsibilities:
- Identify test and assess applicable security controls in line with the Australian Government PSPF ISM and Agency policies and guidelines.
- Analyse and document security risk and recommend treatments and modifications to security practices and procedures using expertise and technical knowledge.
- Contribute to the system authorisation program of work system projects and programs by developing or reviewing security artefacts including Threat and Risk Assessments and System Security Plans.
- Manage develop and support complex relationships with stakeholders to achieve work area goals.
- Manage and maintain the agreed service levels.
- Assist with the development and implementation of security policies procedures projects and strategies.
- Continuously work to improve the efficiency and effectiveness of the cyber security service.
- Educate and inform Agency staff to promote understanding and ensure adherence to security policy and processes
Essential skills and experience
- Must be a Certified Australian Signals Directorate (ASD) IRAP Assessor.
- Extensive demonstrated experience with risk and information security frameworks policies and standards including the Federal Government PSPF and ISM and international standards (ISO 27001/2).
- Demonstrated working experience in security threat and risk assessment and development of security authorisation artefacts.
Desirable Criteria
- Demonstrated security experience within complex ICT environments.
- Strong stakeholder management skills and the ability to communicate security concepts to nontechnical audiences both verbally and in writing.
- Demonstrated experience in Federal Government.
- Understanding of global Cyber Security trends attack vectors and techniques.
- Relevant tertiary or other relevant qualifications.
Duration: 12 Months and possible extension of another 12 Months
Eligibility: Australian/NZ Citizens/PR Holders with NV1 Clearance holders only
Employment Type
Full Time
Key Skills
Report This Job
Disclaimer: Drjobpro.com is only a platform that connects job seekers and employers. Applicants are advised to conduct their own independent research into the credentials of the prospective employer.We always make certain that our clients do not endorse any request for money payments, thus we advise against sharing any personal or bank-related information with any third party. If you suspect fraud or malpractice, please contact us via contact us page.
