Senior Security Assessor

Vertical Scope Group; Canberra; On-site; AUD 120,000 - 180,000; Full time

Job summary

Vertical Scope Group in Canberra is seeking a Senior Cyber Security Assessor to lead security assessment and authorisation of complex ICT capabilities within a highly regulated Defence environment.

You will collaborate with cyber security, engineering and project teams to translate technical information into clear, defensible security outcomes and ensure DSPF and ISM compliance across artefacts and processes.

Qualifications

• Experience in Defence or Australian Government environments.
• Knowledge of Defence Security Principles Framework (DSPF) and Information Security Manual (ISM).
• Experience supporting Assessment and Authorization (A&A) processes.
• Ability to develop high-quality security documentation for complex ICT systems.
• Ability to map controls and manage evidence and traceability.

Responsibilities

• Provide cyber security and assurance advice to project and technical stakeholders.
• Scope, plan and develop security and technical assurance documentation for Assessment and Authorization processes.
• Prepare security artefacts for ICT systems to progress through security assurance processes.
• Translate technical input into clear, structured security documentation for assessment and decision-making.
• Maintain traceability and map security controls against DSPF/ISM requirements.
• Engage with assurance stakeholders on documentation, evidence and requirements.
• Take ownership of allocated security deliverables and manage milestones.

Skills

Cyber security assessment

Security accreditation

Governance

Stakeholder engagement

DSPF knowledge

ISM knowledge

Job description

Senior Cyber Security Assessor

Location: Canberra

Industry: Defence & National Security

• Play a key role in the security assessment and authorisation of complex ICT capabilities within a highly regulated environment.
• Work across cyber security, engineering and project teams to turn complex technical information into clear, defensible security assurance outcomes.
• Apply your Defence security expertise to a significant, long-term program supporting critical Australian capability.

About you:

• Strong experience in cyber security assessment, assurance, governance or security accreditation within Defence or Australian Government environments.
• Demonstrated knowledge of the Defence Security Principles Framework (DSPF) and Information Security Manual (ISM).
• Practical experience supporting Assessment and Authorization (A&A), security accreditation or equivalent assurance processes.
• Proven experience developing high-quality security and technical assurance documentation for complex ICT systems.
• Strong understanding of security controls, control mapping, evidence requirements and assurance traceability.
• Ability to interpret complex technical, engineering and operational information and translate it into structured security documentation.
• Strong stakeholder engagement skills with the ability to work effectively across technical, cyber security, project and senior stakeholder groups.
• Experience working within multidisciplinary or embedded project delivery teams.
• Ability to independently manage multiple security artefacts, priorities and milestones within defined project schedules.
• Australian citizenship and the ability to meet the security clearance requirements of the role.

Key Responsibilities:

• Provide cyber security and assurance advice to project and technical stakeholders.
• Scope, plan and develop security and technical assurance documentation required to support Assessment and Authorization processes.
• Prepare system security and technical assurance artefacts required for ICT systems to progress through applicable security assurance processes.
• Translate technical, engineering and operational input into clear, structured security documentation suitable for assessment and senior decision-making.
• Maintain evidence traceability and map security controls against applicable DSPF and ISM requirements.
• Work closely with engineering, project management, cyber security and delivery teams to develop and validate security artefacts.
• Engage with relevant security assurance and accreditation stakeholders on documentation, evidence and assurance requirements.
• Take ownership of allocated security deliverables and manage them against agreed milestones and project schedules.
• Identify and elevate security risks, evidence gaps, documentation issues or delays that could impact assessment and authorization activities.
• Maintain strong document governance, version control and quality standards across security artefacts.

What’s on Offer

This is an opportunity to contribute to a significant Australian Government program where your security assessment expertise will directly support the delivery of secure ICT capability.

• Work on complex security assessment and authorization activities within a Defence environment.
• Take ownership of high-value security and assurance deliverables.
• Work alongside experienced cyber security, engineering and project professionals.
• Apply your DSPF and ISM expertise to complex, contemporary ICT environments.
• Build further experience across high-assurance Australian Government programs.
• Join a specialist team delivering outcomes that contribute to Australia's national security capability.