Overview
The Government Security Program Manager is responsible for the security of Oracle's information systems, personnel, and facilities for all Australian Government Programmes and shall be the principal security liaison between Oracle and our Government customers. This position is responsible for the management and oversight of compliance with the Defence Industry Security Program (DISP) and other classified Government program security requirements.
Prior experience as an appointed DISP Security Officer, or in an equivalent senior security role within Government or a Defence Industry Prime, is essential.
This is a senior position capable of working closely with government and industry security counterparts, programme management teams, and executives to ensure successful execution of Oracle programme security activities.
The successful applicant will report directly to the Senior Director of International Government Security and will act as the principal security adviser to the Oracle Australia Executive Leadership and the Oracle Australia Chief Security Officer.
Prior experience in a senior security management role such as a DISP appointed Security Officer, Information System Security Officer or equivalent and at least 5 years' experience in the following areas:
* Extensive knowledge of the DISP and associated controls outlined in the Defence Security Principles Framework (DSPF).
* Substantial, demonstrable experience of implementing and maintaining DSPF controls.
* In-depth knowledge of other applicable security and risk-management standards, including but not limited to ISO 27001, ISO 31000 and NIST 800-53, as well as their application within a Government or Defence Industry environment.
* Information Systems Security.
* Implementation and administration of security processes and procedures.
* Establishing and administering classified material control programs, including transfer, transmission, reproduction, destruction, and accountability.
* Extensive experience of managing security incidents, including carrying out internal investigations into security violations and non-compliances and undertaking root cause analysis to establish and remediate security vulnerabilities.
* Administering government sponsored personnel security clearances.
* Management of a government accredited secure facility.
* Delivering security awareness trainings and compliance programs.
* Must be an Australian Citizen holding an Australian Security Clearance (Positive Vetting).
Required Education/Skills:
* Bachelor's (or equivalent) with 5+ years of security experience in support of sensitive host-nation government programmes within Defense Industry.
* Must possess a high level of understanding of government security related policies, procedures, and initiatives.
* Ability to apply the foregoing knowledge of government security requirements in a complex multi-level secure environment to ensure programme compliance.
* Ability to work independently to identify, assess & resolve unique security situations to facilitate contract performance within the bounds of security.
* Highly proficient written and verbal communications skills with emphasis on clear, credible and concise presentation of complex information.
* Must have a professional demeanor, good people skills, ability to communicate effectively, and be able to perform in a dynamic, high-tempo environment.
Qualifications
Career Level - IC2
Responsibilities
* Develop, enforce, and maintain security policies and procedures for information systems in accordance with customer and corporate standards.
* Manage the security authorisation process to include supporting system owners with accreditation and compliance reviews.
* Monitor and manage security controls such as firewalls, access controls, data encryption, and system hardening.
* Risk assessment and management to include conducting vulnerability assessments and developing risk mitigation strategies.
* Incident response to include investigations, stakeholder communication, and reporting.
* Manage and maintain government sponsored personnel security clearances for Oracle personnel, to include:
o Initial processing
o Briefings
o Annual Trainings
o Management of reinvestigations and continuous vetting requirements
o Debriefings
* Monitor secure facility and information system compliance against government accreditation standards.
* Conduct internal assurance audits and inspections; manage preparations for, and be the principal point of contact during all security audits by external government and customer security authorities.
* Establish and maintain a comprehensive security awareness and training programme; develop and deliver security briefings specifically tailored to the unique requirements of the program.
* Assist with administering Oracle's Insider Threat Awareness Program.
* Provide classification management support to programs to include preparation and coordination of Program Classification Guides. Assist in the review of media and documents for classified information.
* Oversee visitor and access control program.
* Manage classified asset lifecycle, to include creation, documentation, storage, transfer and destruction in accordance with Government regulations.
* Support cross border collaboration and contribute to corporate best practices.
* Maintain and administer information management plans for classified infrastructure.
* Establish and maintain key stakeholder relationships with Government Security Authorities, Regulatory Bodies and other industry partners.
#J-18808-Ljbffr