Defence ICT Security GRC Lead (NV1/NV2)

Decipher Bureau; Canberra; On-site; AUD 189,000 - 231,000; Full time

Job summary

Decipher Bureau in Canberra is seeking a senior Defence ICT security professional with NV1/NV2 clearance and a strong background in GRC ICT security. You will own the compliance narrative for Defence programmes and drive long-term stability on critical systems.

The role offers a permanent position on a large Defence program, with ownership of ISM, DSPF and ACSI compliance, including SOPs and A&A documentation. You will interact with Project Engineers, C4ISR leads and Defence security groups.

Qualifications

• 5+ years in IT with a real security bent
• ISM and DSPF knowledge you could recite in your sleep
• Experience within ASD, DDG or CASG moves you up the pile
• Defence ICT security documentation you've authored that landed an actual ATO
• DevSecOps/Agile delivery exposure

Responsibilities

• Own the ISM, DSPF and ACSI compliance story end to end
• Write and maintain SOPs and A&A documentation
• Review what System Integrators and vendors hand over
• Be the go-to person on what compliant means
• Liaise with Defence security groups for guidance and escalation

Skills

NV clearance

Defence ICT security

ISM knowledge

DSPF knowledge

DevSecOps

Job description

Decipher Bureau in Canberra is seeking a senior Defence ICT security professional with NV1/NV2 clearance and a strong background in GRC ICT security. You will own the compliance narrative for Defence programmes and drive long-term stability on critical systems.

The role offers a permanent position on a large Defence program, with ownership of ISM, DSPF and ACSI compliance, including SOPs and A&A documentation. You will interact with Project Engineers, C4ISR leads and Defence security groups.