ICT Security Specialist - Certification and Accreditation

Location Canberra
Discipline Government
Job reference 174405
Salary AU$159999 - AU$160000 per annum
Consultant email daniel.nguyen@au.experis.com

Daniel Nguyen
Senior Account Manager
Let's Connect
https://www.linkedin.com/in/daniel-nguyen-09537a186/
+ 61 478 765 918

ManpowerGroup is committed to being a Diversity Confident Recruiter and encourages applications from people from a diverse range of backgrounds, including people with a disability. Please indicate your preferred method of communication in your resume and please let us know if you require any reasonable adjustments should you be contacted for an interview.

Aboriginal and Torres Strait Islander people are encouraged to apply.

By submitting your resume and other personal information with this application you are consenting to this information being collected in line with our privacy policy. Follow the link to learn more - www.manpowergroup.com.au/privacy-policy

Experis Pty Ltd is a wholly owned subsidiary of ManpowerGroup

State: QLD, licensee/s Manpower Services (Australia) Pty Ltd, LHL-02026-D5L4Q. State: QLD, licensee/s Experis Pty Ltd, LHL-02014-Y5F6D. State: SA, licensee/s Manpower Services (Australia) Pty Ltd, LHS 288856

Experis is currently seeking an experienced ICT Security Specialist - Certification and Accreditation (C&A) for one of our prestigious client with great values and a supportive team culture.

The Opportunity:
The ICT Security specialist will lead system C&A activities which initially involves developing and maintaining ICT security documentation required to achieve C&A. This also includes leading activities to assess and implement recommendations from either Stage 1 and/or Stage 2 assessments.

Responsibilities

  • Lead project C&A activities for a system in accordance with Information Security Manual (ISM) and Defence Security Principles Framework (DSPF) with the goal of achieving system C&A through external organisations.
  • Liaise with internal and external stakeholders to ensure security controls are effective and have been implemented.
  • Provide advice to system owners and user community on the requirements of the Defence ICT C&A process.
  • Determine the impact of any potential security risks and propose alternate treatment options, mitigation strategies or be able to articulate residual risk.
  • Develop, implement and maintain security documentation in support of systemICT C&A. This can include but is not limited to:
    • Security Risk Management Plan (SRMP)
    • System Security Plan (SSP)
    • Security Standard Operating Procedures (SOP)
    • Security Accreditation Plan
    • Incident Response Plan (IRP)
    • Logging and Monitoring Guide
    • Continuous Monitoring Guide

Qualifications, Skills and Experience

  • NV1 clearance (Mandatory).
  • 5 years' experience in a similar role.
  • Qualifications in relevant field.
  • Experience in preparing documentation for IRAP assessments, certification and accreditation.
  • Experience in progressing systems through the Defence C&A process.
  • Hands on or technical security compliance experience across a range of platforms including Windows and Radio Frequency (RF) systems in a Government context.
  • Experience or demonstrated knowledge in applying security controls, policy and compliance assessment recommendations at a technical level.
  • Have good knowledge of the Defence Security Principles Framework (DSPF) and Information Security Manual (ISM)

Location: Canberra, ACT