Senior ICT Security Engineer - ATO & Controls Lead

Profectus; Canberra; On-site; AUD 150,000 - 190,000; Full time

Job summary

Profectus is seeking multiple experienced Senior ICT Security Engineers to support security engineering and accreditation activities within an Australian Government agency. You will integrate security requirements across the system lifecycle so ICT systems achieve and maintain Authority to Operate (ATO).

The work covers security control implementation, accreditation documentation, risk and threat assessments, and engagement with engineering and security teams.

Qualifications

• Demonstrated experience leading the application and compliance of security controls within complex ICT environments.
• Proven experience developing ATO or security accreditation documentation, including System Security Plans
• Experience conducting security risk assessments, threat assessments and compliance reviews

Responsibilities

• Manage and develop ICT system security activities across complex systems
• Lead the application and compliance of security controls and security operations procedures
• Develop and maintain accreditation documentation, including Concepts of Operations (CONOPs) and System Security Plans (SSPs)
• Achieve and maintain ATO for ICT systems
• Conduct security risk assessments, threat assessments and compliance reviews
• Work with ICT engineers, architects and security teams to agree controls and secure approvals
• Prepare executive briefs and security recommendations for senior management
• Communicate technical security matters clearly to technical and non-technical audiences
• Contribute to secure system design and operation

Skills

Security controls

Risk assessment

Threat assessment

Accreditation docs

SSP development

Job description

Profectus is seeking multiple experienced Senior ICT Security Engineers to support security engineering and accreditation activities within an Australian Government agency. You will integrate security requirements across the system lifecycle so ICT systems achieve and maintain Authority to Operate (ATO).

The work covers security control implementation, accreditation documentation, risk and threat assessments, and engagement with engineering and security teams.