Security Assessment & Authorisation (A&A) Consultant | Perm engagement

Expert360; Ballarat; On-site; AUD 100,000 - 150,000; Full time

Job summary

Expert360 is seeking an experienced Security Assessment and Authorisation (A&A) Consultant for Ballarat-based security risk management across systems, applications, and third-party services. You will guide systems through the A&A lifecycle, obtain and maintain Authority to Operate, and work with system owners, architects, and compliance stakeholders to ensure robust risk management and accreditation.

You will conduct risk assessments, monitor treatment plans, assess control effectiveness, and

Qualifications

• Experience in security assessment and authorisation, cybersecurity risk, assurance, or GRC.
• Strong knowledge of the Australian Government ISM, Essential Eight, and security accreditation processes.
• Experience preparing security and accreditation documentation.
• Strong analytical, organisational, and stakeholder management skills.
• Ability to communicate complex security requirements clearly.

Responsibilities

• Conduct security risk assessments and facilitate stakeholder risk workshops.
• Monitor risks, treatment plans, and residual risk.
• Assess the implementation and effectiveness of security controls.
• Execute authorisation processes in accordance with ISM and client requirements.
• Prepare and maintain risk assessments, accreditation documentation, and audit evidence.
• Develop security policies, procedures, and incident-response documentation.
• Provide guidance on the ISM, Essential Eight, and client-specific security controls.
• Liaise with Authorising Officers, system owners, and project teams.
• Support the establishment and ongoing management of GRC tooling.
• Track authorisation status, deliverables, and compliance gaps.
• Support continuous monitoring, audits, and inspections.

Skills

Security assessment

GRC

Stakeholder management

Risk workshops

Analytical skills

Tools

GRC tooling

ISM framework

Job description

About Expert360:

Expert360 empowers more than 42,000 (and growing!) elite professionals around the world to find great work and be successful. Expert360 was founded in 2013 with a simple but powerful mission to connect amazing people with great companies to get important work done.

We believe in choice, flexibility and empowerment. We believe that if you can change the world of work, you can change the world. Come and join us in defining and bringing to life the future of work!

About the Role:

We're looking for an experienced Security Assessment and Authorisation (A&A) Consultant to perform security risk management and assurance activities across systems, applications, and third-party services based in Ballarat.

You'll work closely with system owners, architects, project teams, cybersecurity specialists, and compliance stakeholders to guide systems through the A&A lifecycle and obtain and maintain Authority to Operate.

What You'll Be Doing

• Conduct security risk assessments and facilitate stakeholder risk workshops
• Monitor risks, treatment plans, and residual risk
• Assess the implementation and effectiveness of security controls
• Execute authorisation processes in accordance with the ISM and client requirements
• Prepare and maintain risk assessments, accreditation documentation, and audit evidence
• Develop security policies, procedures, and incident-response documentation
• Provide guidance on the ISM, Essential Eight, and client-specific security controls
• Liaise with Authorising Officers, system owners, and project teams
• Support the establishment and ongoing management of GRC tooling
• Track authorisation status, deliverables, and compliance gaps
• Support continuous monitoring, audits, and inspections

What We're Looking For

• Experience in security assessment and authorisation, cybersecurity risk, assurance, or GRC
• Strong knowledge of the Australian Government ISM, Essential Eight, and security accreditation processes
• Experience preparing security and accreditation documentation
• Strong analytical, organisational, and stakeholder management skills
• Ability to manage competing priorities and communicate complex security requirements clearly

Mandatory Requirements

Due to the secure nature of this role, all applicants must:

• Be an Australian Citizen
• Hold a current Australian Government Negative Vetting 1 Security Clearance
• Be willing and able to work onsite in Ballarat