Cyber Security Risk & System Authorisation Specialist

Bureau Of Meteorology; Brisbane; On-site; AUD 90,000 - 120,000; Full time

Job summary

Bureau Of Meteorology is seeking a System Risk Officer to support and conduct security assessments as part of the System Authorisation process for new and existing systems.

The role requires analysing business, technical and security information, reviewing control evidence, and preparing artefacts such as system descriptions, security plans and risk assessments for review by senior staff and the authorising official.

Qualifications

• Developing knowledge of cyber security risk and system security assessment practices.
• Sound analytical and written communication skills.
• Attention to detail and ability to explain technical issues clearly.

Responsibilities

• Conduct security assessments as part of the System Authorisation process for new systems and for existing systems requiring retrospective assessment, review or reauthorisation.
• Progress security assessments from initiation through to findings and recommendations that inform System Authorisation decisions.
• Gather and analyse business, technical and security information, review security control implementation and evidence, identify issues and risks, and seek guidance on complex matters.
• Prepare and maintain artefacts needed for security assessment and System Authorisation (system descriptions, system security plans, security risk assessments, control evidence, treatment plans, assessment reports, findings and draft decision briefs).
• Liaise with external security assessors, including providers undertaking independent or IRAP-aligned assessments, and assist with planning, evidence collation and stakeholder updates.

Job description

Bureau Of Meteorology is seeking a System Risk Officer to support and conduct security assessments as part of the System Authorisation process for new and existing systems.

The role requires analysing business, technical and security information, reviewing control evidence, and preparing artefacts such as system descriptions, security plans and risk assessments for review by senior staff and the authorising official.