Job Description:
Empowering organizations to manage work efficiently and effectively requires a robust compliance program.
This role involves leading and managing the IRAP compliance program, including interpreting the Australian Signals Directorate's Information Security Manual, determining the scope of requirements, assessing compliance, liaising with external IRAP assessors, and implementing or remediating requirements not fully implemented.
The mission is to achieve and maintain IRAP compliance in a timely manner.
Main Responsibilities:
* Compliance Interpretation and Implementation: Independently interpret and apply IRAP and other control frameworks to ensure technical controls meet security and compliance standards.
* Control Implementation: Oversee the implementation of compliance controls to optimize risk reduction, cost efficiency, and business agility.
* Liaison with External Assessors: Act as the primary point of contact with external IRAP assessors to coordinate the assessment process and ensure necessary documentation is provided.
Performance and Program Measurement:
* Evaluation and Monitoring: Develop criteria to measure program performance, conduct evaluations, and verify data and reports for completeness and correctness.
* Problem Resolution: Proactively identify and address issues in the IRAP compliance program, recommending solutions and adjustments for continuous improvement.
Program Management:
* Operational Oversight: Gain a thorough understanding of company operations to integrate this knowledge into the management of the IRAP program.
* Risk Management: Identify potential risks to the IRAP program, develop effective risk management strategies, and track progress in mitigating or managing those risks.
Requirements:
* Australian citizenship is required.
* Bachelor's degree in IT/Technology is essential.
* Expert-level knowledge of the Australian Signal Directorate's Information Security Manual is necessary.
* 2+ years of experience creating IRAP authorization packages at the 'Protected' Level or above are required.
* Knowledge and experience with IRAP assessment methodology and requirements are necessary.
* 7+ years of experience in program management, with at least 3+ years specifically in compliance program management, are required.