Security Risk & Authorization Specialist

Expert360; Ballarat; On-site; AUD 100,000 - 150,000; Full time

Job summary

Expert360 is seeking an experienced Security Assessment and Authorisation (A&A) Consultant for Ballarat-based security risk management across systems, applications, and third-party services. You will guide systems through the A&A lifecycle, obtain and maintain Authority to Operate, and work with system owners, architects, and compliance stakeholders to ensure robust risk management and accreditation.

You will conduct risk assessments, monitor treatment plans, assess control effectiveness, and

Qualifications

• Experience in security assessment and authorisation, cybersecurity risk, assurance, or GRC.
• Strong knowledge of the Australian Government ISM, Essential Eight, and security accreditation processes.
• Experience preparing security and accreditation documentation.
• Strong analytical, organisational, and stakeholder management skills.
• Ability to communicate complex security requirements clearly.

Responsibilities

• Conduct security risk assessments and facilitate stakeholder risk workshops.
• Monitor risks, treatment plans, and residual risk.
• Assess the implementation and effectiveness of security controls.
• Execute authorisation processes in accordance with ISM and client requirements.
• Prepare and maintain risk assessments, accreditation documentation, and audit evidence.
• Develop security policies, procedures, and incident-response documentation.
• Provide guidance on the ISM, Essential Eight, and client-specific security controls.
• Liaise with Authorising Officers, system owners, and project teams.
• Support the establishment and ongoing management of GRC tooling.
• Track authorisation status, deliverables, and compliance gaps.
• Support continuous monitoring, audits, and inspections.

Skills

Security assessment

GRC

Stakeholder management

Risk workshops

Analytical skills

Tools

GRC tooling

ISM framework

Job description

Expert360 is seeking an experienced Security Assessment and Authorisation (A&A) Consultant for Ballarat-based security risk management across systems, applications, and third-party services. You will guide systems through the A&A lifecycle, obtain and maintain Authority to Operate, and work with system owners, architects, and compliance stakeholders to ensure robust risk management and accreditation.

You will conduct risk assessments, monitor treatment plans, assess control effectiveness, and