Security Document Writer

Downer; Canberra; On-site; AUD 110,000 - 165,000; Full time

Job summary

JC2SPO is seeking a Security Documentation Writer to assist with Security Accreditation and Certification Support. The role delivers the required security documentation suite for allocated systems and solutions to support Certification Consultants in accreditation and certification processes.

The candidate undertakes complex activities related to defining and delivering Security Risk Management Plans, System Security Plans, Incident Response Plans and other related security documentation as

Qualifications

• Develop security assurance documentation for systems certification activities.
• Provide information security advisory service to ICT programs/projects.
• Review and audit security measures and documentation for alignment with ISM/PSPF.
• Identify, analyse and escalate information security and business risk.
• Collaborate with internal delivery teams to ensure security process consistency.

Responsibilities

• Deliver security documentation suites for allocated systems.
• Assist Certification Consultants in accreditation and certification processes.
• Maintain records in accordance with security policies and guidelines.
• Ensure compliance with Australian Government security standards.
• Build relationships with ICT teams to support security governance.

Skills

Security risk management

System security documentation

Security auditing

Policy and procedure review

Stakeholder communication

Vulnerability analysis

Risk escalation

Education

Industry-standard information security qualifications

Job description

JC2SPO is seeking a Security Documentation Writer to assist with Security Accreditation and Certification Support.

The requirement is to deliver the required security documentation suite for allocated systems and solutions to support the Certification Consultants in the accreditation and certification process.

The candidate undertakes complex activities and tasks related to defining and delivering Security Risk Management Plans, System Security Plans, System Overviews, Incident Response Plans and other related security documentation as required by the System Manager or Certification Consultant.

Requirements of the Role:

Essential job criteria:

• Provide a dedicated information security lead advisory service to assigned ICT program and and/or project(s).
• Development of required security assurance documentation for systems certification activities.
• Communication within the ICT Program, other Information security peers and ICT teams.
• Auditing the effectiveness of system security measures deployed
• Review of system security documentation, policies and procedures to ensure alignment with organizational security objectives and Australian Govt. cyber security standards and guidelines.
• Identification, analysis, evaluation and escalation of information security and business risk.
• Identification and analysis of security requirements to support the mission system and support system operation Assisting the Capability and Acquisition Group (CASG) in understanding and mitigating risks associated with the operation capability systems supporting ADF operations and exercises.
• Identification, analysis and evaluation of vulnerabilities associated with security exceptions, software bugs and design flaws.
• Building and managing relationships with internal delivery teams (including operational security teams), to ensure consistency and effectiveness of security processes.
• System compliance assurance with mandatory information security requirements as set by the Australian Government contained in the ASD’s Information Security Manual (ISM) and the Attorney General’s Department (AGD) Protective Security Policy Framework (PSPF) standards, protocols and guidelines.
• Work effectively in a small team environment.
• Record and maintain files/information in accordance with requirements.
• Industry standard qualifications are essential.

Highly Desirable:

The successful candidate will possess the following skills:

• Knowledge or experience with systems and applications.
• Understanding of modern networking, computers and operating systems.
• Extensive Cyber security and Risk Management background.

SFIA Skills Sought:

The selection, design, justification, implementation and operation of controls and management strategies to maintain the security, confidentiality, integrity, availability, accountability and relevant compliance of information systems with legislation, regulation and relevant standards.

Explains the purpose of and provides advice and guidance on the application and operation of elementary physical, procedural and technical security controls. Performs security risk, vulnerability assessments, and business impact analysis for medium complexity information systems. Investigates suspected attacks and manages security incidents. Uses forensics where appropriate.

We warmly welcome applications from individuals of all backgrounds, including First Nations Australians, Australian Defence Force and First Responder veterans, women in STEM, and people of all abilities, including those registered with the NDIS.