ICT Security Advisor

• Ensuring the ICT systems are designed, developed, operated and maintained in accordance with the Australian Government Information Security Manual (ISM), Defence Security Principles Framework (DSPF), the Australian Communications Security Instructions (ACSI) suite of publications and other relevant Defence security instructions
• Ensuring appropriate security measures and controls are implemented for ICT systems on the Program to ensure risks to the confidentiality, integrity or availability of those ICT systems and their information are managed as per Defence Security requirements
• Identifying threats and vulnerabilities arising from the design of ICT systems in the Program
• ensuring that they are appropriately managed and mitigated as per the respective system’s Security Risk Management Plans
• Ensuring that system Standard Operating Procedures (SOP) and any other additional required artefacts are developed and maintained in accordance with applicable security policies and ICT system certification and accreditation requirements

• Minimum 10 years of experience in an information technology role specialising in information security
• Technical knowledge of Defence IT Security principles
• Recent experience in authoring Defence ICT Security documentation
• Experience working with DevSecOps and Agile delivery methodologies would be highly regarded
• Experience in the Certification, Risk Management, Vulnerability Assessment and Management (CRVM) and Information Assurance (IA) of Defence and National Security ICT and Operational Technology (OT) systems
• Australian Citizens ONLY
• NV1 security clearance

Experience working with DevSecOps and Agile delivery methodologies would be highly regarded