Employment OS for your Business

PCS 04004 – Protective Security risk review and ICT controls assessor

Defence & National Security • Canberra, Australian Capital Territory 2600, Australia • Full-time
AI Job Summary
  • Provide specialist protective and cyber security services to Commonwealth agencies and industry partners.
  • Review and update Protective Security Risk Review documents aligned to current risks/threats, PSPF and ISM.
  • Review ICT controls and advise required adjustments for ongoing security management and continuous improvement.

Role Type

Contract • Full-time • Mid-level Senior

Description

About Us

IAG Defence & National Security (DNS) is part of IAG, a specialist advisory firm supporting complex infrastructure, Defence and national security programs across Australia.

Our DNS team works closely with Commonwealth agencies and industry partners to deliver specialist expertise into nationally significant programs. Our success depends on our ability to identify, engage and mobilise highly specialised talent quickly and effectively. IAG is recognised as Veteran Friendly Employer under the Veteran Employment Program.

The Role

The Australian National Audit Office (ANAO) is seeking specialist protective and cyber security services to assist with performing an ICT controls assessment and updating the ANAO Protective Security Risk Review document

About You

  • Work with the ANAO to provide a schedule and milestone for each deliverable.
  • Support the ANAO to review and update the ANAO Protective Security Risk Review document ensuring that they reflect the current and emerging ANAO business and security risks and threats (with consideration to credible security sources, intelligence agencies information, the ACSC,and security industry more broadly); and address the PSPF and ISM requirements; and
  • Review and update key performance metrics for ICT security to ensure they are suitable for contemporary security practices. This includes clarifying the measures and the approach to updating the threats and risks rating periodically. Review the application of existing technical ICT Controls and provide support to document ICT Controls in a format suitable for ongoing security management reporting, maintenance and continuous improvement. Provide advice as to required adjustments if any improvement may be required Prepare an Essential Eight Security Risk Management Plan (SRMP) using the existing ANAO template. Present and deliver findings to ANAO stakeholders in a format suitable for management and also sufficient detail at the technical level

What we offer

With offices in Perth, Brisbane, Melbourne, Sydney, and Canberra, we’re a tight-knit team, working across some of Australia’s most critical infrastructure and Defence projects. We come from diverse backgrounds and pride ourselves on our flexible, supportive and collaborative team culture. We can offer great work, great people, great culture, great conditions, and an all-round great time, whilst you go about developing a great career in this space.

As part of IAG, you’ll be joining a team of more than 250 professionals’ working across a range of integrated workstreams in a friendly and approachable environment.