Cloud Security Architect

Atturra; Canberra; On-site; AUD 140,000 - 190,000; Full time

Benefits offered by this job

Career growth

Professional development

Parental leave

Wellbeing program

Veteran friendly

Job summary

Atturra in Canberra is seeking a Cloud GRC Security Consultant to design, deliver, and secure critical infrastructure. This permanent full-time role is based in Belconnen, ACT and involves working on high-impact government and enterprise projects.

You will apply ISM controls, map risks to SRMP/SSP, and develop SSPs, SRMPs, IRPs, and related documents, with NV1 clearance mandatory. The team offers a collaborative, growth-focused environment with strong governance, Azure knowledge, and

Qualifications

• NV1 clearance (current or eligible with sponsorship).
• Experience authoring ISM-aligned SSPs, SRMPs and IRPs for ATO in government or defence.
• Knowledge of Azure security architecture (identity, network segmentation, key management, logging/monitoring).
• Familiarity with ASD's Cloud Controls Matrix and OSCAL ISM tooling (desirable).

Responsibilities

• Interpret and apply current ISM controls to architectures and tooling.
• Map application risks, threats, and controls into SRMP and SSP.
• Define incident response procedures aligned to ASD/ACSC obligations.
• Establish continuous monitoring per the new detection/CTI control set.
• Coordinate document delivery with project artefacts and schedules.
• Liaise with client ISSOs/ITSAs to validate evidence before ATO submission.
• Create SSP, SSP Annex, SRMP, IRP, Continuous Monitoring Plan, and SOPs.

Skills

NV1 clearance

Azure security architecture

ISM controls knowledge

OSCAL tooling familiarity

Job description

What would you be doing?

We're on the hunt for a Cloud GRC Security Consultant — combining deep technical expertise with outstanding customer support to design, deliver, and secure critical infrastructure. Based in Belconnen, ACT, this permanent full-time role offers the opportunity to work on high-impact projects that matter.

Key Responsibilities

• Interpret and apply current ISM controls (June 2026 release) to existing application architectures, including AI-assisted/AI-powered development guidance where relevant to any custom tooling in scope
• Map application-specific risks, threats, and controls into the SRMP and SSP
• Define incident response procedures aligned to ASD/ACSC reporting obligations
• Establish a continuous monitoring approach consistent with the new detection/CTI control set
• Work with existing project artefacts and schedules across engagements to sequence document delivery
• Liaise with client ISSOs/ITSAs and internal governance leads to validate control evidence prior to ATO submission
• Creation of
  • System Security Plan (SSP)
  • SSP Annex — to be produced against ASD's updated System Security Plan Annex template (June 2026 release)
  • Security Risk Management Plan (SRMP)
  • Incident Response Plan
  • Continuous Monitoring Plan
  • Security Standard Operating Procedures (SOPs)
  • Security Classification and Categorisation Guide (SCCG)
  • Business Impact Level (BIL) assessment

Working Conditions

• Based in Belconnen, ACT
• Permanent full time
• Australian Citizen with NV1 Security Clearance mandatory

What will make you successful in this role?

• NV1 clearance (current, or eligible with sponsorship pathway)
• Demonstrated experience authoring ISM-aligned SSPs, SRMPs, and IRPs for ATO in an Australian Government or Defence context
• Working knowledge of Azure security architecture (identity, network segmentation, key management, logging/monitoring)
• Familiarity with ASD's Cloud Controls Matrix template and OSCAL-based ISM tooling (desirable)

Why is this an exciting opportunity?

Atturra is one of the fastest growing ASX-listed advisory and IT solutions companies in Australia, giving you a strong foundation to fulfil your career ambitions.

We currently have 1100+ professionals working across Australia, New Zealand, Singapore and Hong Kong who are using innovation to lead the way.

The Managed Services division of Atturra provides leading Hybrid IT, Private Cloud, and Connectivity services, backed by decades of industry experience. Our expertise, combined with the strength of our people, makes us one of the most complete and prominent “as-a-service” providers in the market.

What Our People Say

“Atturra has a great working environment and management are very supportive of their staff. We celebrate success and have fun while working hard.”

Why you’ll love working here

Culture of possibility

At Atturra we embrace innovation within our teams, fostering an environment of possibility and growth. We believe in creating a supportive and welcoming culture, where everyone is encouraged to achieve success through collaboration, hard work and dedication.

A strong set of company values

Our culture is reflected by our employees who demonstrate camaraderie, innovation, dedication, respect and excellence in everything they do. These traits have become integral to the way we do business and are the values we strive for.

Valuable employee benefits

• Career growth via succession planning, internal mobility programs, and mentorship opportunities.
• Ongoing investment in professional development through industry certifications.
• Employee benefits, recognition, and wellbeing platform.Mental health support through our Employee Assistance Program.
• Support for family and caring responsibilities, including paid parental leave.
• Employee referral program, with monetary incentives offered.
• Commitment to supporting Australia’s veterans Atturra is proud to be recognised as a Veteran Friendly Employer by the Department of Veterans Affairs’ Veteran Employment Commitment (VEC) and is committed to supporting Australia’s veteran community. We aim to enhance the employment experience for veterans by improving recruitment, support, retention, and leadership opportunities to ensure they have a meaningful and impactful career with us.

Careers | Atturra

https://atturra.com/au-en/careers

Atturra is passionate about playing an active role in addressing the digital skills gap and being an advocate for diversity and Inclusion, and welcomes applications from all irrespective of their gender, LGBTQI identity, ethnicity, religion, physical ability, or age.