Cloud Security Architect: GRC & IR Lead

Atturra; Canberra; On-site; AUD 140,000 - 190,000; Full time

Benefits offered by this job

Career growth

Professional development

Parental leave

Wellbeing program

Veteran friendly

Job summary

Atturra in Canberra is seeking a Cloud GRC Security Consultant to design, deliver, and secure critical infrastructure. This permanent full-time role is based in Belconnen, ACT and involves working on high-impact government and enterprise projects.

You will apply ISM controls, map risks to SRMP/SSP, and develop SSPs, SRMPs, IRPs, and related documents, with NV1 clearance mandatory. The team offers a collaborative, growth-focused environment with strong governance, Azure knowledge, and

Qualifications

• NV1 clearance (current or eligible with sponsorship).
• Experience authoring ISM-aligned SSPs, SRMPs and IRPs for ATO in government or defence.
• Knowledge of Azure security architecture (identity, network segmentation, key management, logging/monitoring).
• Familiarity with ASD's Cloud Controls Matrix and OSCAL ISM tooling (desirable).

Responsibilities

• Interpret and apply current ISM controls to architectures and tooling.
• Map application risks, threats, and controls into SRMP and SSP.
• Define incident response procedures aligned to ASD/ACSC obligations.
• Establish continuous monitoring per the new detection/CTI control set.
• Coordinate document delivery with project artefacts and schedules.
• Liaise with client ISSOs/ITSAs to validate evidence before ATO submission.
• Create SSP, SSP Annex, SRMP, IRP, Continuous Monitoring Plan, and SOPs.

Skills

NV1 clearance

Azure security architecture

ISM controls knowledge

OSCAL tooling familiarity

Job description

Atturra in Canberra is seeking a Cloud GRC Security Consultant to design, deliver, and secure critical infrastructure. This permanent full-time role is based in Belconnen, ACT and involves working on high-impact government and enterprise projects.

You will apply ISM controls, map risks to SRMP/SSP, and develop SSPs, SRMPs, IRPs, and related documents, with NV1 clearance mandatory. The team offers a collaborative, growth-focused environment with strong governance, Azure knowledge, and