Assessment and Authorisation

Accenture Australia; Ballarat; On-site; AUD 120,000 - 160,000; Full time

Job summary

Accenture Australia, based in Ballarat, seeks an experienced Security Assessment and Authorisation Consultant to lead security risk management across systems, applications and third parties. You will collaborate with system owners, project teams and cybersecurity specialists to navigate the A&A lifecycle and secure Authority to Operate.

You will advise on ISM and Essential Eight controls, develop accreditation documentation, and support continuous monitoring, audits and improvements.

Qualifications

• Experience in security assessment, authorisation and GRC.
• Knowledge of the Australian Government ISM, Essential Eight and accreditation processes.
• Experience preparing security and accreditation documentation.
• Strong analytical, organisational and stakeholder-management abilities.
• Ability to manage competing priorities and communicate complex security requirements clearly.

Responsibilities

• Conduct security risk assessments and facilitate stakeholder risk workshops.
• Monitor risks, treatment plans and residual risk across systems and third-party services.
• Assess the implementation and effectiveness of security controls.
• Execute authorisation processes per ISM and client requirements.
• Prepare and maintain risk assessments, accreditation documentation, and audit evidence.
• Develop security policies, procedures and incident-response documentation.
• Provide guidance on ISM, Essential Eight and client-specific controls.
• Liaise with Authorising Officers and project teams.
• Support the establishment and ongoing management of GRC tooling.
• Track authorisation status, deliverables and compliance gaps.
• Support continuous monitoring, audits and inspections.
• Assist managers and program leads with day-to-day activities.

Skills

Security assessment

ISM/Essential Eight

Documentation

Stakeholder mgmt

Communication

Job description

About Accenture

Accenture is a global professional services company with leading capabilities in digital, cloud and security. Our people deliver services across Strategy and Consulting, Technology, Operations and Accenture Song, helping clients create value through technology and human ingenuity.

Join Accenture and work alongside talented professionals on meaningful and innovative projects, with opportunities to develop your expertise and advance your career.

The opportunity

Based in Ballarat, we are seeking an experienced Security Assessment and Authorisation (A&A) Consultant to perform security risk management and assurance activities across systems, applications and third-party services.

You will work with system owners, architects, project teams, cybersecurity specialists and compliance stakeholders to guide systems through the A&A lifecycle and obtain and maintain Authority to Operate.

Key Responsibilities

• Conduct security risk assessments and facilitate stakeholder risk workshops.
• Monitor risks, treatment plans and residual risk.
• Assess the implementation and effectiveness of security controls.
• Execute authorisation processes in accordance with the ISM and client requirements.
• Prepare and maintain risk assessments, accreditation documentation and audit evidence.
• Develop security policies, procedures and incident-response documentation.
• Provide guidance on the ISM, Essential Eight and client-specific security controls.
• Liaise with Authorising Officers, system owners and project teams.
• Support the establishment and ongoing management of GRC tooling.
• Track authorisation status, deliverables and compliance gaps.
• Support continuous monitoring, audits and inspections.
• Assist managers and program leads with day-to-day activities.

What You’ll Bring

• Experience in security assessment and authorisation, cybersecurity risk, assurance or GRC.
• Knowledge of the Australian Government ISM, Essential Eight and security accreditation processes.
• Experience preparing security and accreditation documentation.
• Strong analytical, organisational and stakeholder-management skills.
• The ability to manage competing priorities and communicate complex security requirements clearly.

Mandatory eligibility

Due to the nature of this role, applicants must be Australian citizens and hold a current Australian Government security clearance. The role is based in Ballarat.