Cyber Security Advisor

One of our clients is hiring for the role Cyber Security Advisor at Sydney location

Role: Cyber Security Advisor

Location of work: Sydney, NSW

Length of contract: 2 months

Contract extensions: 12 months

Security clearance: Baseline security cleared

Requirements:

Overview:

The Sourcing Platforms team is seeking an experienced Cyber Security Advisor to oversee and manage security requirements and documentation updates in preparation for an upcoming IRAP (Information Security Registered Assessors Program) assessment. This role is essential for ensuring compliance with the Australian Government Information Security Manual (ISM) and supporting secure service delivery across the BuyICT platform.

The appointed specialist will work closely with the team to provide expert guidance, ensure security controls remain current, and identify any new controls required to maintain compliance.

Key duties and responsibilities

• Deliver expert cyber security advice and guidance to the Sourcing Platforms team.
• Interpret the platform’s current security controls against updated ISM and SSPA controls (including changes made quarterly by ASD) and identify new controls required for compliance.
• Update and maintain key security documentation, including:
• Security Risk Management Plan (SRMP).
• System Security Plan (SSP).
• System Security Plan Annex (SSPA).
• Change Management Plan.
• Disaster Recovery and Business Continuity Plan.
• Support platform security enhancements and recommend measures to mitigate risks, thereby strengthening the platform’s security posture.

Technical skills

Required Qualifications

• Membership in Category A or B of the ACSC IRAP Assessor Membership program, or a minimum of five years’ technical ICT experience with at least two years dedicated to information security for systems governed by the ISM and related publications.
• Proficiency in implementing the Australian Cyber Security Centre’s Essential 8 strategies.
• Demonstrated ability to identify, analyse, and resolve infrastructure vulnerabilities and application security issues.

#J-18808-Ljbffr