- Fixed term permanent role- 12 months
- Brisbane CBD, hybrid
- Build and own the assurance process from the ground up
Our client is delivering a multi-year technology transformation program. As new systems are introduced, each must be assessed against the organisation's security control requirements before entering production. To meet this demand, the Cyber Security team is seeking a Cyber Security Consultant to support the ongoing security assurance process and to take ownership of that process once it's fully implemented. The role operates within a well-governed environment and works closely with Governance, Risk and Compliance (GRC), architecture and approvals functions.
The role
- Support the design and implementation of a security assurance system, and own its ongoing operation
- Assess systems against the Australian Government Information Security Manual (ISM) and NIST CSF 2.0, obtaining evidence that required controls have been implemented
- Conduct technical security risk assessments, or refer them to the GRC function as appropriate
- Provide oversight of the assessment work performed by security analysts, including prioritisation and quality review
- Provide security advice and guidance to project and technology stakeholders
- Engage with GRC and the approvals function to support informed decisions
- Substantial experience in cyber security governance, risk and compliance
- Demonstrated experience implementing and embedding a security control or assurance framework within an organisation
- Experience in security assessment and authorisation using the ISM Risk Management Framework, NIST RMF or equivalent
- Sound judgement in interpreting control requirements within the context of the organisation
- Well-developed stakeholder engagement and written communication skills
How to apply
If this sounds like something you've done before and would like to do again, please click APPLY NOW. For a confidential discussion, contact Carrah Jordan at carrah.jordan@pra.com.au or 3071 7200.
