Security Document Writer in Canberra

JC2SPO is seeking a Security Documentation Writer to assist with Security Accreditation and Certification Support.

The requirement is to deliver the required security documentation suite for allocated systems and solutions to support the Certification Consultants in the accreditation and certification process.

The candidate undertakes complex activities and tasks related to defining and delivering Security Risk Management Plans, System Security Plans, System Overviews, Incident Response Plans and other related security documentation as required by the System Manager or Certification Consultant.

Requirements of the Role:

Essential job criteria:

• Provide a dedicated information security lead advisory service to assigned ICT program and and/or project(s).
• Development of required security assurance documentation for systems certification activities.
• Communication within the ICT Program, other Information security peers and ICT teams.
• Auditing the effectiveness of system security measures deployed
• Review of system security documentation, policies and procedures to ensure alignment with organizational security objectives and Australian Govt. cyber security standards and guidelines.
• Identification, analysis, evaluation and escalation of information security and business risk.
• Identification and analysis of security requirements to support the mission system and support system operation Assisting the Capability and Acquisition Group (CASG) in understanding and mitigating risks associated with the operation capability systems supporting ADF operations and exercises.
• Identification, analysis and evaluation of vulnerabilities associated with security exceptions, software bugs and design flaws.
• Building and managing relationships with internal delivery teams (including operational security teams), to ensure consistency and effectiveness of security processes.
• System compliance assurance with mandatory information security requirements as set by the Australian Government contained in the ASD’s Information Security Manual (ISM) and the Attorney General’s Department (AGD) Protective Security Policy Framework (PSPF) standards, protocols and guidelines.
• Work effectively in a small team environment.
• Record and maintain files/information in accordance with requirements.
• Industry standard qualifications are essential.

Highly Desirable:

The successful candidate will possess the following skills:

• Knowledge or experience with systems and applications.
• Understanding of modern networking, computers and operating systems.
• Extensive Cyber security and Risk Management background.

SFIA Skills Sought:

The selection, design, justification, implementation and operation of controls and management strategies to maintain the security, confidentiality, integrity, availability, accountability and relevant compliance of information systems with legislation, regulation and relevant standards.

Explains the purpose of and provides advice and guidance on the application and operation of elementary physical, procedural and technical security controls. Performs security risk, vulnerability assessments, and business impact analysis for medium complexity information systems. Investigates suspected attacks and manages security incidents. Uses forensics where appropriate.

We warmly welcome applications from individuals of all backgrounds, including First Nations Australians, Australian Defence Force and First Responder veterans, women in STEM, and people of all abilities, including those registered with the NDIS.

#J-18808-Ljbffr