Cybersecurity GRC Analyst- AU Citizen with Security Clearance

Accenture; Sydney; On-site; AUD 120,000 - 180,000; Full time

Job summary

Accenture in Australia is seeking an experienced Security Assessment and Authorisation (A&A) consultant to perform security risk management and assurance across systems, applications, and third‑party services. The role ensures systems meet security standards, risks are documented, and appropriate authority to operate (ATO) is obtained and maintained.

This position collaborates with system owners, architects, project teams, cybersecurity specialists, and compliance stakeholders to guide them

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, or related field.
• Certifications such as CISM, CRISC, CISSP, IRAP Assessor, or equivalent security accreditation experience preferred.
• Strong understanding of Australian PSPF and ISM cybersecurity principles and NIST guidelines (Govern, Identify, Protect, Detect, Respond).

Responsibilities

• Conduct risk assessments to identify, evaluate, and mitigate security risks across projects and operational environments.
• Facilitate risk workshops with stakeholders to capture and validate security risks.
• Prepare and maintain risk assessments, and accreditation documentation.
• Ensure compliance with security controls for governance, identification, protection, detection, and response functions.
• Maintain accurate records of security authorisations, exceptions, and audit evidence for accreditation reviews.

Skills

Documentation

Attention to detail

ISM controls

Collaboration tools

GRC platforms

Communication

Education

Bachelor’s degree in Cybersecurity/Information Technology

CISM, CRISC, CISSP, IRAP Assessor certifications

Tools

SharePoint

Confluence

Job description

About Accenture

Accenture is a global professional services company with leading capabilities in digital, cloud and security. Combining unmatched experience and specialised skills across more than 40 industries, we offer Strategy and Consulting, Technology and Operations services and Accenture Song — all powered by the world’s largest network of Advanced Technology and Intelligent Operations centers. Our 799,000 people deliver on the promise of technology and human ingenuity every day, serving clients in more than 120 countries. We embrace the power of change to create value and shared success for our clients, people, shareholders, partners and communities. Visit us at www.accenture.com.

Join Accenture and help transform leading organisations and communities around the world. The sheer scale of our capabilities and client engagements and the way we collaborate, operate and deliver value provides an unparalleled opportunity to grow and advance. Choose Accenture and make delivering innovative work part of your extraordinary career.

Job Description:

We are seeking an experienced and results-driven Security Assessment and Authorisation (A&A) consultant, to perform security risk management and assurance activities across systems, applications, and third-party services. The role ensures that systems meet required security standards; risks are properly assessed and documented, and appropriate authority to operate (ATO) are obtained and maintained.

This position works closely with system owners, architects, project teams, cybersecurity specialists, and compliance stakeholders to guide them through the A&A lifecycle and ensure alignment with organisational, regulatory, and Australian government frameworks.

Key Responsibilities:

• Security Risk Management
  • Conduct risk assessments to identify, evaluate, and mitigate security risks across projects and operational environments.
  • Facilitate risk workshops with stakeholders to capture and validate security risks.
  • Monitor and report on risk status, treatment progress, and residual risk to governance forums.
  • Ensure security controls are implemented and tested to mitigate identified risks effectively.
  • Help project manage day to day tasks with the manager and program leads.
• Security Assessment and Authorisation
  • Execute system security authorisation processes in accordance with ISM (Information Security Manual) and the client's security requirements, including Risk Management Framework (RMF) steps.
  • Prepare and maintain risk assessments, and accreditation documentation.
  • Ensure compliance with security controls for governance, identification, protection, detection, and response functions.
• Maintaning Compliance
  • Develop and maintain security documentation as per the client's security guidelines (e.g., security policies, procedures, incident response plans).
  • Support compliance obligations by adhering to ISMAustralian Government’s security compliance requirements for classified and controlled information handling.
  • Maintain accurate records of security authorisations, exceptions, and audit evidence for accreditation reviews.
• Stakeholder Engagement
  • Liaise with Authorising Officers, system owners, and project teams to ensure security documentation meets the client's required standards.
  • Provide guidance on ISM, Essential Eight, and the Department’s specific security controls during project delivery.
• Monitoring & Reporting
  • Support in establishment and ongoing management of GRC (Governance, Risk and Compliance) tooling.
  • Track and report on security authorisation status, documentation, deliverables, and compliance gaps.
  • Assist in continuous monitoring activities and maintain documentation for audits and inspections.

Qualifications and Skills:

• Education & Certifications
  • Bachelor’s degree in Cybersecurity, Information Technology, or related field.
  • Certifications such as CISM, CRISC, CISSP, IRAP Assessor, or equivalent security accreditation experience preferred.
• Technical Knowledge
  • Strong understanding of Australian PSPF and ISM cybersecurity principles and NIST guidelines (Govern, Identify, Protect, Detect, Respond).
  • Deep understanding of the Essential 8 requirements for classified information and processes.
  • Experience with security documentation (Accreditation packages).
• Skills
  • Excellent documentation and organisational skills with attention to detail.
  • Ability to interpret and apply ISM and security controls in practical scenarios.
  • Experience in collaboration tools (e.g., SharePoint, Confluence)
  • Familiarity with security GRC (Governance, Risk and Compliance) platforms.
  • Strong communication skills for engaging operational and business stakeholders.

Security Clearance

• Active/Inactive NV1 Security Clearance
• Australian Citizens with ability to obtain a clearance considered

Must be willing to work onsite 5 days a week

Why Join Us?

This is an exciting opportunity to play a key role in the Security Risk, Compliance, and Architecture domain within a dynamic and collaborative environment. You will work alongside experienced professionals, gain exposure to complex initiatives, and play a key role in driving business success.

Benefits of working at Accenture:

• 18 weeks paid parental leave
• Long & short-term career break opportunities
• Structured career development program
• Local and international career opportunities.
• Certified as a Family Inclusive Workplace
• Flexible Work Arrangements - centered around Accenture’s Truly Human ethos and our commitment to supporting the health and wellbeing of our people.
• We are proud to be in the top 3 of last year’s Diversity & Inclusion Index!

Equal Employment Opportunity Statementfor Australia:

Accenture is a an EEO and Affinitive Action Employee of Females/Minorities/Veterans/Individuals with Disabilities.

At Accenture, we recognise that our people are multi-dimensional, and we create a work environment where all people feel like they can bring their authentic selves to work, every day.

Our unwavering commitment to inclusion and diversity unleashes innovation and creates a culture where everyone feels they have equal opportunity. Our range of progressive policies support flexibility in ‘where’, ‘when’ and ‘how’ our people work to ensure that Accenture is an organisation where you can strive for more, achieve great things and maintain the balance and wellbeing you need.

We encourage applications from all people, and we are committed to removing barriers to the recruitment process and employee lifecycle. All employment decisions shall be made without regard to age, disability status, ethnicity, gender, gender identity or expression, religion or sexual orientation and we do not tolerate discrimination.

To ensure our workplace is inclusive and diverse we are setting bold goals and taking comprehensive action. To achieve these goals, we collect information that allows us to track the effectiveness of our Inclusion and Diversity programs. Learn how Accenture protects your personal data and know your rights in relation to your personal data.

#LI_GM