IRAP Assessor & ISM Readiness Lead (Remote Australia)

38North Security; Sydney; Hybride; AUD 180 000 - 240 000; Plein temps

Résumé du poste

38North Security seeks an ASD-endorsed IRAP assessor to lead Australian security advisory engagements. You will conduct IRAP assessments, advise on ISM implementations, assess Essential Eight maturity, and support DISP readiness.

The role starts as a consultancy with a path to permanent employment, serving US and APAC clients from Australia. Ideal candidates bring eight+ years in ICT security, cloud experience (AWS/Azure/Google Cloud), and strong reporting and client engagement skills.

Qualifications

• Current ASD endorsement as an IRAP assessor.
• Australian citizenship and an active NV1 security clearance or higher.
• Eight+ years ICT security experience, including four years with ISM controls for government-related systems.
• Demonstrated delivery of cloud IRAP assessments or ISM readiness engagements at PROTECTED level.

Responsabilités

• Lead IRAP assessments of cloud services at PROTECTED level with evidence-based reporting.
• Deliver ISM readiness reviews, Essential Eight maturity assessments, and DISP readiness/gap assessments with remediation roadmaps.
• Develop and review security documentation, risk assessments, and assessment evidence.
• Advise on cloud architecture, data sovereignty, identity, access control, logging, cryptography, and shared responsibilities.
• Map FedRAMP, ISO 27001, and SOC 2 evidence to Australian requirements, identifying gaps.

Connaissances

IRAP assessments

Cloud security

Report writing

Client communication

Engagement management

PSPF knowledge

Assessment advisory

Security architectures

Formation

Australian citizenship (NV1 or higher)

Outils

AWS

Azure

Google Cloud

Description du poste

38North Security seeks an ASD-endorsed IRAP assessor to lead Australian security advisory engagements. You will conduct IRAP assessments, advise on ISM implementations, assess Essential Eight maturity, and support DISP readiness.

The role starts as a consultancy with a path to permanent employment, serving US and APAC clients from Australia. Ideal candidates bring eight+ years in ICT security, cloud experience (AWS/Azure/Google Cloud), and strong reporting and client engagement skills.