Senior ICT Security Engineer — Risk & Compliance Lead

IT Alliance; Canberra; On-site; AUD 140,000 - 190,000; Full time

Job summary

IT Alliance seeks a Senior ICT Security Engineer for a Federal Government client in Canberra. The role focuses on leading security controls and operations within complex ICT environments, developing ATO documentation and conducting risk assessments.

The candidate should have formal security certifications (CISSP, CISM, CCSP, SABSA) and IRAP assessor training or equivalent accreditation. Equal employment opportunity is noted and accessibility support can be provided.

Qualifications

• Experience leading application and compliance of security controls and operations in complex ICT environments.
• Experience developing and maintaining Authority to Operate (ATO) documentation including System Security Plans.
• Experience conducting security risk assessments, threat assessments and compliance reviews.
• Ability to prepare high-quality technical documentation, executive briefs and security recommendations for senior management.
• Formal security qualifications or certifications (e.g., CISSP, CISM, CCSP, SABSA).
• IRAP Assessor Training or equivalent security accreditation experience.

Responsibilities

• Lead application and compliance of security controls within complex ICT environments.
• Develop and maintain ATO documentation including System Security Plans and artefacts.
• Conduct security risk and threat assessments and compliance reviews.
• Prepare technical documentation and security recommendations for senior management.

Skills

Security controls

Security operations

Risk assessments

Technical documentation

Executive briefs

Security certifications

Education

CISSP

CISM

CCSP

SABSA

Job description

IT Alliance seeks a Senior ICT Security Engineer for a Federal Government client in Canberra. The role focuses on leading security controls and operations within complex ICT environments, developing ATO documentation and conducting risk assessments.

The candidate should have formal security certifications (CISSP, CISM, CCSP, SABSA) and IRAP assessor training or equivalent accreditation. Equal employment opportunity is noted and accessibility support can be provided.