Cloud Security Architect

Atturra Limited; Canberra; On-site; AUD 90,000 - 130,000; Full time

Benefits offered by this job

Career growth

Professional development

Mental health support

Parental leave

Employee referral program

Job summary

Atturra Limited is seeking a Cloud GRC Security Consultant based in Canberra, ACT. This permanent full-time role focuses on designing, delivering, and securing critical infrastructure, with a strong emphasis on ISM-aligned documentation and governance for government/defence contexts.

You will own security deliverables, work with client ISSOs/ITSAs, and contribute to high-impact projects across TG engagements, including incident response and continuous monitoring.

Qualifications

• +NV1 clearance current or sponsorship pathway.
• +Experience authoring ISM-aligned SSPs, SRMPs, IRPs for Australian Government/Defence.
• +Working knowledge of Azure security architecture (identity, network segmentation, key management, logging/monitoring).
• +Familiarity with ASD's Cloud Controls Matrix and OSCAL-based ISM tooling (desirable).

Responsibilities

• Interpret and apply ISM controls (June 2026 release) to existing architectures.
• Map application risks, threats, and controls into SRMP and SSP.
• Define incident response procedures per ASD/ACSC reporting obligations.
• Establish a continuous monitoring approach per new CTI control set.
• Coordinate document delivery with project artefacts and schedules.
• Liaise with client ISSOs/ITSAs and governance leads to validate evidence before ATO submission.
• Create SSP, SSP Annex, SRMP, Incident Response Plan, Continuous Monitoring Plan, SOPs, SCCG, and BIL assessment.

Skills

NV1 clearance

Azure security architecture

ISM controls understanding

SSP authoring

SRMP authoring

IRP authoring

OSCAL-based ISM tooling

Tools

ASD Cloud Controls Matrix template

OSCAL tooling

Job description

Select how often (in days) to receive an alert:

Location: Canberra, Australian Capital Territory, AU, 2600

What would you be doing?

We're on the hunt for aCloud GRC Security Consultant — combining deep technical expertise with outstanding customer support to design, deliver, and secure critical infrastructure. Based in Belconnen, ACT, this permanent full-time role offers the opportunity to work on high-impact projects that matter.

As a key member of our delivery team, you'll take ownership of innovative network solutions that support complex, secure environments. Your work will be critical in ensuring we meet — and exceed — client expectations.

Key Responsibilities:

• Interpret and apply current ISM controls (June 2026 release) to existing application architectures, including AI-assisted/AI-powered development guidance where relevant to any custom tooling in scope
• Map application-specific risks, threats, and controls into the SRMP and SSP
• Define incident response procedures aligned to ASD/ACSC reporting obligations
• Establish a continuous monitoring approach consistent with the new detection/CTI control set
• Work with existing project artefacts and schedules across engagements to sequence document delivery
• Liaise with client ISSOs/ITSAs and internal governance leads to validate control evidence prior to ATO submission
• Creation of
  • System Security Plan (SSP)
  • SSP Annex — to be produced against ASD's updated System Security Plan Annex template (June 2026 release)
  • Security Risk Management Plan (SRMP)
  • Incident Response Plan
  • Continuous Monitoring Plan
  • Security Standard Operating Procedures (SOPs)
  • Security Classification and Categorisation Guide (SCCG)
  • Business Impact Level (BIL) assessment

Working Conditions

• Based in Belconnen, ACT
• Australian Citizen with NV1 Security Clearance mandatory

What will make you successful in this role?

• NV1 clearance (current, or eligible with sponsorship pathway)
• Demonstrated experience authoring ISM-aligned SSPs, SRMPs, and IRPs for ATO in an Australian Government or Defence context
• Working knowledge of Azure security architecture (identity, network segmentation, key management, logging/monitoring)
• Familiarity with ASD's Cloud Controls Matrix template and OSCAL-based ISM tooling (desirable)

Why is this an exciting opportunity?

Atturra is one of the fastest growing ASX-listed advisory and IT solutions companies in Australia, giving you a strong foundation to fulfil your career ambitions.

We currently have 1100+ professionals working across Australia, New Zealand, Singapore and Hong Kong who are using innovation to lead the way.

The Managed Services division of Atturra provides leading Hybrid IT, Private Cloud, and Connectivity services, backed by decades of industry experience. Our expertise, combined with the strength of our people, makes us one of the most complete and prominent “as-a-service” providers in the market.

What our people say:

“Atturra has a great working environment and management are very supportive of their staff. We celebrate success and have fun while working hard.”

Why you’ll love working here

Culture of possibility

At Atturra we embrace innovation within our teams, fostering an environment of possibility and growth. We believe in creating a supportive and welcoming culture, where everyone is encouraged to achieve success through collaboration, hard work and dedication.

A strong set of company values

Our culture is reflected by our employees who demonstrate camaraderie, innovation, dedication, respect and excellence in everything they do. These traits have become integral to the way we do business and are the values we strive for.

Valuable employee benefits

• Career growth via succession planning, internal mobility programs, and mentorship opportunities.
• Ongoing investment in professional development through industry certifications.
• Employee benefits, recognition, and wellbeing platform.Mental health support through our Employee Assistance Program.
• Support for family and caring responsibilities, including paid parental leave.
• Employee referral program, with monetary incentives offered.

Commitment to supporting Australia’s veterans

Atturra is proud to be recognised as a Veteran Friendly Employer by the Department of Veterans Affairs’ Veteran Employment Commitment (VEC) and is committed to supporting Australia’s veteran community. We aim to enhance the employment experience for veterans by improving recruitment, support, retention, and leadership opportunities to ensure they have a meaningful and impactful career with us.

Atturra is passionate about playing an active role in addressing the digital skills gap and being an advocate for diversity and Inclusion, and welcomes applications from all irrespective of their gender, LGBTQI identity, ethnicity, religion, physical ability, or age.