Security Documentation Architect for Certification

Downer; Canberra; On-site; AUD 110,000 - 165,000; Full time

Job summary

JC2SPO is seeking a Security Documentation Writer to assist with Security Accreditation and Certification Support. The role delivers the required security documentation suite for allocated systems and solutions to support Certification Consultants in accreditation and certification processes.

The candidate undertakes complex activities related to defining and delivering Security Risk Management Plans, System Security Plans, Incident Response Plans and other related security documentation as

Qualifications

• Develop security assurance documentation for systems certification activities.
• Provide information security advisory service to ICT programs/projects.
• Review and audit security measures and documentation for alignment with ISM/PSPF.
• Identify, analyse and escalate information security and business risk.
• Collaborate with internal delivery teams to ensure security process consistency.

Responsibilities

• Deliver security documentation suites for allocated systems.
• Assist Certification Consultants in accreditation and certification processes.
• Maintain records in accordance with security policies and guidelines.
• Ensure compliance with Australian Government security standards.
• Build relationships with ICT teams to support security governance.

Skills

Security risk management

System security documentation

Security auditing

Policy and procedure review

Stakeholder communication

Vulnerability analysis

Risk escalation

Education

Industry-standard information security qualifications

Job description

JC2SPO is seeking a Security Documentation Writer to assist with Security Accreditation and Certification Support. The role delivers the required security documentation suite for allocated systems and solutions to support Certification Consultants in accreditation and certification processes.

The candidate undertakes complex activities related to defining and delivering Security Risk Management Plans, System Security Plans, Incident Response Plans and other related security documentation as