IRAP Security Consultant

Randstad; City of Melbourne; Remote; AUD 160.000 - 209.000; Vollzeit

Zusammenfassung

Randstad Digital is seeking an IRAP System Security Plan (SSP) Consultant to support an Australian government project. You will review previous assessment findings, update the SSP and its annex with remediation evidence, and map the system to ISM, PSPF and Essential Eight requirements.

You will coordinate with teams in the US, UK and India, handling a large control set and preparing for the IRAP reassessment. Remote work is available with a Melbourne preference.

Qualifikationen

• Experience writing and maintaining System Security Plans for government systems.
• Current Australian Government Baseline clearance is essential.
• Strong knowledge of ISM, PSPF and Essential Eight.
• Experience supporting IRAP assessments or reassessments with remediation planning.
• Ability to work with distributed, international teams and manage stakeholders.

Aufgaben

• Review the previous IRAP assessment findings and create a remediation plan.
• Update the SSP and its control annex to reflect current system and risks.
• Assess applicability of 1,000+ controls and document status and evidence.
• Align SSP with updated Australian Government control requirements (ISM/PSPF/Essential Eight).
• Coordinate with teams in the UK and India to gather evidence and track remediation.
• Prepare the system and documentation for the upcoming IRAP reassessment.

Kenntnisse

System Security Plans

IRAP experience

Security governance

Remediation planning

Stakeholder management

Cross-border collaboration

Ausbildung

Australian Government Baseline clearance

Tools

ISM

PSPF

Essential Eight

Jobbeschreibung

IRAP System Security Plan (SSP) Consultant

• Up to $1,000 per day
• Contract, ASAP start
• Remote anywhere on the east coast, Melbourne preferred

The opportunity

We're partnering with a global information management organisation. Their IRAP reassessment is scheduled for Q3 next year. They need an experienced security compliance specialist to get their System Security Plan in shape well before then.

You’ll review the outcomes of the last assessment and update the SSP. You'll also work through an annex of more than 1,000 controls and pull in the ones relevant to remediation. Finally, you'll map the system against the latest government control requirements so nothing is missed when the IRAP assessor arrives.

You'll report to the security lead and work with teams in the US, UK and India, so you'll need to communicate clearly across time zones.

What you’ll be doing

• Reviewing the previous IRAP assessment report and findings, and turning them into a clear remediation picture
• Updating the SSP and its control annex to reflect the current system, risks and environment
• Assessing whether each of the 1,000+ controls applies, and documenting implementation status and evidence
• Aligning the SSP with updated Australian Government control requirements (ISM and related frameworks)
• Working with teams in the UK and India to gather evidence and track remediation
• Preparing the system and documentation for the upcoming IRAP reassessment

What you’ll bring

• Current Australian Government Baseline clearance (essential)
• Hands-on experience writing and maintaining System Security Plans for government systems
• Strong working knowledge of the ISM, plus exposure to PSPF and Essential Eight
• Experience supporting IRAP assessments or reassessments, including remediation planning
• The patience and rigour to work through a very large control set accurately
• Confident stakeholder skills with distributed, international teams

Nice to have

• IRAP Assessor endorsement, or experience working closely with assessors
• A background with outsourced or managed service providers
• Exposure to records, data or information management environments

At Randstad Digital, we are passionate about providing equal employment opportunities and embracing diversity to the benefit of all. We actively encourage applications from any background.