Description
The main role of this position will be in relation to the Department's requirement to provide IT security consultant services to its business areas in maintenance and development of its ICT environment.
Specified Personnel will be responsible for the execution of a range of activities and tasks under the direction of a Director and will maintain a close working relationship with stakeholders in a complex IT portfolio.
The services will include and not be limited to:
Provision of IT Security Risk Assessments;
Creation and maintenance of documentation such as Security Risk Management Plans (SRMP) and System Security Plans (SSP);
Policy and security advice in relation to Australian Government Security guidelines and standards;
Undertake IT system certification and accreditation processes;
Advice for the conducting of vulnerability assessments;
Working with stakeholders to review architectural documentation;
Assist with the development of Security Patterns to enable alternate systems delivery models (eg crowd sourced development);
Assist with maturing capability in the Department's cloud and mobility space;