Security Document Writer

Business Review Group; Canberra; On-site; AUD 100,000 - 140,000; Full time

Job summary

Business Review Group in Canberra is seeking an experienced Cyber Security Documentation Specialist to support security accreditation across Defence ICT systems and capabilities.

The role focuses on developing, reviewing and maintaining security documentation to support system accreditation, risk management and compliance with Australian Government security requirements.

Qualifications

• Experience developing SSPs and SRMPs.
• Familiarity with ISM and PSPF.
• Ability to translate complex security concepts into documentation.
• Experience with governance and accreditation processes.

Responsibilities

• Develop security accreditation documentation.
• Review policies for government security compliance.
• Collaborate with Defence stakeholders and ICT teams.
• Maintain accurate security documentation and records.
• Support audits and security assessments.

Skills

Security documentation

Cyber security

Technical writing

System Security Plans

Risk assessment

Education

Certifications in information security

Security accreditation knowledge

Job description

CYBER SECURITY DOCUMENT WRITER

Role Title: Security Document Writer

Discipline: Systems and Software Engineering - System Security

Skill Level: Level 2

Location: Canberra, ACT

Working Arrangements: On-site - ACT-based candidates only

An Australian Government Security Clearance is required for this position.

Role Overview

BRG is seeking an experienced Security Document Writer to support security accreditation and certification activities across Defence ICT systems and capabilities.

The role will focus on developing, reviewing and maintaining comprehensive security documentation to support system accreditation, risk management and compliance with Australian Government security requirements.

The successful candidate will work closely with Certification Consultants, System Managers, ICT teams and security stakeholders to develop security assurance documentation, identify cyber security risks and support the ongoing security and operational readiness of Defence systems.

Key Responsibilities

• Develop and maintain security accreditation and certification documentation, including:
  • System Security Plans (SSPs).
  • Security Risk Management Plans (SRMPs).
  • System Overviews.
  • Incident Response Plans (IRPs).
  • Additional security assurance documentation as required.
• Provide information security advice and documentation support to assigned ICT programs and projects.
• Review security policies, procedures and technical documentation for compliance with Government security requirements.
• Support the assessment and auditing of implemented security controls.
• Identify, analyse and document information security risks, vulnerabilities and compliance gaps.
• Assess security exceptions, software vulnerabilities and design weaknesses.
• Support Defence stakeholders in understanding and mitigating cyber security risks.
• Ensure documentation aligns with the ASD Information Security Manual (ISM) and Protective Security Policy Framework (PSPF).
• Collaborate with Certification Consultants, System Managers and technical teams to support accreditation outcomes.
• Maintain accurate records and security documentation in accordance with Defence requirements.

Essential Experience And Capabilities

Candidates should demonstrate:

• Experience developing cyber security documentation and accreditation artefacts.
• Strong understanding of security certification, accreditation and assurance processes.
• Experience preparing security risk assessments, System Security Plans and related documentation.
• Knowledge of the Australian Government ISM and PSPF.
• Experience reviewing and assessing security controls, policies and procedures.
• Understanding of information security risk management and vulnerability assessment.
• Strong technical writing, documentation and analytical skills.
• Ability to communicate effectively with ICT engineers, cyber security specialists and Defence stakeholders.
• Ability to work collaboratively within small, multidisciplinary teams.
• Relevant industry-standard qualifications in information security, cyber security or a related discipline.

Highly Desirable Experience

• Experience supporting Defence ICT systems and applications.
• Strong background in cyber security and risk management.
• Knowledge of networking, computer systems and operating systems.
• Experience supporting Defence security accreditation and certification activities.
• Project management experience.
• Experience working within Defence, CASG or other Australian Government ICT environments.

ITAR Compliance Requirements

The role requires compliance with applicable International Traffic in Arms Regulations (ITAR), as the successful candidate will require access to ITAR-controlled information and/or equipment.

Candidate Profile

This opportunity would suit an experienced Cyber Security Documentation Specialist, Security Assurance Analyst, Cyber Security Consultant, Security Accreditation Specialist or Security Technical Writer with a strong understanding of Defence cyber security requirements.

The strongest candidates will combine practical experience developing SSPs, SRMPs, security accreditation documentation and risk assessments with knowledge of ISM, PSPF, security controls and Defence ICT environments.

The role requires someone capable of translating complex technical and security information into clear, accurate and compliant documentation to support Defence certification and accreditation activities.