Security Assessment & Authorisation Consultant

Client 1; Canberra; On-site; AUD 90,000 - 120,000; Full time

Benefits offered by this job

Permanent full-time employment

Defence program exposure

Mentorship and professional growth

Job summary

Cleared is seeking a Security Assessment & Authorisation Consultant to support Defence assessment and authorisation activities, producing security artefacts and assurance documentation for cloud products.

You will work within an embedded consulting team with autonomy and guidance from senior security professionals, engaging with engineering, security stakeholders and client teams on long-term defence programs.

Qualifications

• Approximately 2 to 5 years' experience in cyber security or a related consulting discipline.
• "Experience contributing to cyber security engagements involving security documentation, IT audits or IRAP-aligned assessments.","Ability to develop and maintain security documentation and assurance artefacts.","Understanding of security control frameworks and compliance requirements.","Strong written communication skills with the ability to produce high-quality documentation.","Ability to work collaboratively with technical and non-technical stakeholders.","Experience within consulting environments or defence-related sectors is highly regarded.","Ability to work autonomously while contributing effectively within a team environment."],
• job_responsibilities_description:[
• Produce components of security and technical assurance documentation for Defence assessment and authorisation
• Support IT audits and IRAP-aligned assessments, including evidence collection and control testing
• Prepare draft System Security Plans and control mappings
• Translate technical inputs into structured security documentation
• Deliver artefacts on milestones and project schedules
• Maintain evidence traceability and alignment with DSPF and ISM
• Identify risks, gaps and schedule impacts to senior team
• Engage with engineering, project management and security stakeholders
• Assist with documentation development and validation with Defence and client stakeholders

Responsibilities

• Produce components of security and technical assurance documentation required for Defence assessment and authorisation activities.
• Support internal IT audits and IRAP-aligned assessment activities, including evidence collection and control testing.
• Prepare draft System Security Documentation, including System Security Plans and security control mappings.
• Translate technical, engineering and operational inputs into structured security documentation.
• Deliver assigned security artefacts in line with agreed milestones and project schedules.
• Maintain evidence traceability and control mapping against Defence Security Principles Framework (DSPF) and Information Security Manual (ISM) requirements.
• Identify and elevate risks, gaps and schedule impacts to senior team members.
• Support engagement with engineering teams, project management teams and security stakeholders.
• Assist with documentation development and validation activities with Defence and client stakeholders.

Skills

Cyber security

Documentation

Stakeholder communication

Autonomy

Written communication

Teamwork

Consulting experience

Security frameworks

Education

Bachelor's degree in Cyber Security / Information Technology or related field

Equivalent industry certification

Tools

DSPF mapping

ISMS/IRAP documentation

Job description

Role Title

Security Assessment & Authorisation Consultant

Location

Canberra, ACT

Working Arrangement

Permanent Full-Time

Clearance required

AGSVA Negative Vetting Level 1 (NV1) minimum

Company overview

Our client is delivering security assessment and authorisation services in support of the Future Defence Secret Environment Program. This engagement focuses on producing the security documentation, assurance artefacts and supporting evidence required for Defence assessment and approval of cloud products for operational use.

Job Description

We are seeking a Security Assessment & Authorisation Consultant to support the development of security and technical assurance documentation required for Defence assessment and authorisation activities.

Working within an embedded consulting team, you will contribute to the production of security artefacts, assist with audit and assessment activities, and work closely with technical, engineering and security stakeholders. The role offers the opportunity to work with a high degree of autonomy while receiving guidance and quality assurance support from senior security professionals.

This is a long-term engagement supporting a significant Defence program, with opportunities to contribute to other security consulting engagements over time.

Duties and Responsibilities

• Produce components of security and technical assurance documentation required for Defence assessment and authorisation activities.
• Support internal IT audits and IRAP-aligned assessment activities, including evidence collection and control testing.
• Prepare draft system security documentation, including System Security Plans and security control mappings.
• Translate technical, engineering and operational inputs into structured security documentation.
• Deliver assigned security artefacts in line with agreed milestones and project schedules.
• Maintain evidence traceability and control mapping against Defence Security Principles Framework (DSPF) and Information Security Manual (ISM) requirements.
• Identify and elevate risks, gaps and schedule impacts to senior team members.
• Support engagement with engineering teams, project management teams and security stakeholders.
• Assist with documentation development and validation activities with Defence and client stakeholders.

Education/Certifications required

• Tertiary qualification in Cyber Security, Information Technology or a related discipline; or
• Equivalent industry certification.

Knowledge/Skills required

• Approximately 2 to 5 years' experience in cyber security or a related consulting discipline.
• Experience contributing to cyber security engagements involving security documentation, IT audits or IRAP-aligned assessments.
• Ability to develop and maintain security documentation and assurance artefacts.
• Understanding of security control frameworks and compliance requirements.
• Strong written communication skills with the ability to produce high-quality documentation.
• Ability to work collaboratively with technical and non-technical stakeholders.
• Experience within consulting environments, cyber security consultancies, the Australian Public Service, Australian Defence Force, or related sectors is highly regarded.
• Ability to work autonomously while contributing effectively within a team environment.

Employment benefits

• Permanent full-time employment.
• Opportunity to contribute to a major Defence program.
• Long-term engagement with potential for extended work beyond the current contract period.
• Exposure to Defence cyber security assessment and authorisation activities.
• Opportunities to work across additional client engagements and consulting activities.
• Mentorship and support from experienced security professionals.

Diversity and Inclusion

We value diversity and are committed to creating an inclusive environment for all employees.

Veterans

Defence and Federal Government industry experience is highly desirable We strong encourage veterans and individuals with Defence experience to apply. Your unique skills and background are highly valued, and we are committed to supporting your transition into this role.

About Cleared

At Cleared, we provide tailored recruitment solutions to individuals seeking their next opportunity and to organisations searching for talent within Defence Industry, Intelligence and National Security.