Job Description
Remote is seeking an experienced Information Security and Compliance specialist to join the team at AGO. The role supports projects by defining and managing security compliance frameworks in consultation with certification and accreditation authorities, and assisting project teams to design and implement appropriate security controls. Responsibilities include developing security documentation to support formal compliance assessments and security approvals, working closely with certification and accreditation teams. (RFx26769)
Role Description
Key Duties And Responsibilities
* Define and manage security compliance activities in consultation with certification and accreditation authorities.
* Support project teams to design and implement security controls and security functions aligned to project deliverables.
* Develop and maintain security documentation required to support formal compliance assessments and security approvals.
* Work closely with certification and accreditation teams to ensure documentation and evidence meet assessment requirements.
* Conduct risk assessments for new technologies and capabilities, drawing on relevant government and international security frameworks.
* Embed security and compliance activities into project schedules, negotiating scope, timing and deliverables as required.
* Provide clear advice and guidance to project teams through effective communication and stakeholder engagement.
* Contribute across multiple projects of varying size and complexity, as required by the program of work.
Essential Criteria
* Develop and provide guidance on information security architectures and access models.
* Evaluate compliance of IT systems development with Commonwealth IT security Certification and Accreditation standards.
* Ensure compliance with Commonwealth Government security standards.
* Ensure security risks, business functions and priorities are considered.
* Develop and maintain effective stakeholder relationships.
* Deliver requirements agreed throughout the agile development process.
* Participate in and contribute to design reviews, stakeholder meetings, agile/SCRUM processes
* Provision documentation in accordance with relevant policies and procedures.