Security GRC & A&A Analyst - Risk, Compliance, Audit

Accenture; Sydney; On-site; AUD 120,000 - 180,000; Full time

Job summary

Accenture in Australia is seeking an experienced Security Assessment and Authorisation (A&A) consultant to perform security risk management and assurance across systems, applications, and third‑party services. The role ensures systems meet security standards, risks are documented, and appropriate authority to operate (ATO) is obtained and maintained.

This position collaborates with system owners, architects, project teams, cybersecurity specialists, and compliance stakeholders to guide them

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, or related field.
• Certifications such as CISM, CRISC, CISSP, IRAP Assessor, or equivalent security accreditation experience preferred.
• Strong understanding of Australian PSPF and ISM cybersecurity principles and NIST guidelines (Govern, Identify, Protect, Detect, Respond).

Responsibilities

• Conduct risk assessments to identify, evaluate, and mitigate security risks across projects and operational environments.
• Facilitate risk workshops with stakeholders to capture and validate security risks.
• Prepare and maintain risk assessments, and accreditation documentation.
• Ensure compliance with security controls for governance, identification, protection, detection, and response functions.
• Maintain accurate records of security authorisations, exceptions, and audit evidence for accreditation reviews.

Skills

Documentation

Attention to detail

ISM controls

Collaboration tools

GRC platforms

Communication

Education

Bachelor’s degree in Cybersecurity/Information Technology

CISM, CRISC, CISSP, IRAP Assessor certifications

Tools

SharePoint

Confluence

Job description

Accenture in Australia is seeking an experienced Security Assessment and Authorisation (A&A) consultant to perform security risk management and assurance across systems, applications, and third‑party services. The role ensures systems meet security standards, risks are documented, and appropriate authority to operate (ATO) is obtained and maintained.

This position collaborates with system owners, architects, project teams, cybersecurity specialists, and compliance stakeholders to guide them