Security Analyst

Bridge IT Engineering; Canberra; On-site; AUD 90,000 - 120,000; Full time

Job summary

Bridge IT Engineering seeks a skilled Security Analyst in Canberra to provide cyber security assessment and authorization advice. The role involves engaging with key stakeholders and producing system documentation. Ideal candidates will hold relevant certifications like IRAP, have experience in ICT systems security within government contexts, and a solid understanding of Australian cyber security standards. This position requires a detailed grasp of security risk management methodologies and the ability to provide contextual security advice.

Qualifications

• Hold a relevant industry information systems security certification.
• Detailed understanding of key cyber security standards.
• Experience in ICT Information Security or ICT Security Architecture.

Responsibilities

• Provide contextual security advice to projects and stakeholders.
• Develop and manage system security documentation.
• Review system documentation and assess systems.

Skills

Cyber security assessment

Stakeholder engagement

Contextual security advice

Security documentation management

Security risk management

Education

Relevant industry information systems security certification

Tools

PSPF

DSPF

ISM

ISO 27001

IRAP certification

Job description

The Security Analyst will utilise their experience and understanding of key cyber security standards, to provide cyber security assessment and authorisation advice, and to produce system documentation in support of assessment requirements. The Security Analyst will be required to engage with key stakeholders within the department, and within programs and project capability groups.

Activities include:

• Advice and support: providing contextual security advice to projects and stakeholders to ensure effective security controls are implemented as per Australian Government and Defence requirements. Also, reviewing and assessing proposed and actual changes to system baselines.
• Pre-assessment: developing and managing system security documentation.
• Security assessment: reviewing system documentation and assessing systems
• Governance and management: reviewing and assessing system changes to approved baselines, developing and maintaining processes and policy.
• Hold a relevant industry information systems security certification
• Detailed understanding of the PSPF, DSPF, ISM and other relevant ICT Security Standards such as ISO 27001.
• Experience in ICT Information Security or ICT Security Architecture, preferably with communications network systems

It is highly desirable that the System Security Analyst also has the following experience and qualifications to undertake this task:

• IRAP certification, or have previous experience in the IRAP program.
• Recent experience in security assessments of ICT systems within Australian Government context.
• Experience in cloud certification and accreditation within an Australian Government context.
• Experience in ICT Security Risk Management and methodologies.

*Please note that only shortlisted candidates will be contacted