Certified Irap Assessors - Melbourne, Australia - Resource Corner Pty Ltd

Resource Corner Pty Ltd

Verified Company

Melbourne, Australia

1 week ago

Posted by:

Olivia Brown

beBee Recruiter

Description

Hiring.

Role:
certified IRAP Assessors

RFQ closing date:
Thursday, 15 February 2024

Estimated start date:
Friday, 01 March 2024

Initial contract duration: 12 MonthsExtension term:12 months

Location of work:
ACT, QLD, SA, VIC

Security clearance:
Must have Negative Vetting Level 1

Job Description
- (ASD) certified IRAP Assessors:An IRAP Assessor is a certified Security Analyst role required to understand, assess, and communicate cyber security controls protecting Government ICT Systems so informed decisions can be made regarding associated cyber security risk. The IRAP Assessors will be required to assess and document system security controls to meet the Protective Security Policy Framework (PSPF) and Information Security Manual(ISM) requirements on behalf of the Agency and shared services partners.

The assessors will be required to undertake Agency system authorisation documentation and risk statements when there is no conflict of interest with an IRAP assessment.

It is a Government and Agency requirement that certain critical systems undergo an independent security assessment conducted by an IRAP Assessor.

They will provide an independent security assessment report (commonly referred to as an IRAP report), which is used to assess a systems suitability and risk.

The IRAP Assessor must be certified by ASD and is required to prove their experience and qualifications.

Key Tasks/Duties
Identify, test, and assess applicable security controls in line with the AustralianGovernment PSPF, ISM and Agency policies and guidelines. Analyse and document security risk and recommend treatments and modifications tosecurity practices and procedures using expertise and technical knowledge.

Contribute to the system authorisation program of work, system projects and programs, by developing or reviewing security artefacts, including Threat and Risk Assessments and System Security Plans.

Manage, develop and support complex relationships with stakeholders to achieveRFQ selection criteria

Mandatory Criteria

Must be a Certified Australian Signals Directorate (ASD) IRAP Assessor.
Extensive demonstrated experience with risk and information securityframeworks, policies and standards, including the Federal Government PSPFand ISM, and international standards (ISO 27001/2).
Demonstrated working experience in security threat and risk assessment and development of security authorisation artefacts.

Weighted Criteria

Demonstrated security experience within complex ICT environments.
Strong stakeholder management skills, and the ability to communicate security concepts to non-technical audiences both verbally and in writing.
Demonstrated experience in Federal Government.
Understanding of global Cyber Security trends, attack vectors and techniques.

Job Type:
Contract

Contract length: 12 months

Licence/Certification: