What you’ll be doing
- Developing and maintaining System Security Plans (SSPs), IRAP aligned artefacts, and compliance documentation
- Supporting ATO packages, risk assessments, control validation, and evidence gathering
- Working directly with program leads, architects, and SMEs to embed secure by design practices
- Contributing to governance uplift, policy refinement, and ongoing assurance cycles
- Translating technical detail into clear, defensible security documentation for senior stakeholders
- Active NV1 security clearance
- 3–5 years in GRC, assurance, or cyber governance
roles
- Strong understanding of ISM, PSPF, Essential Eight, and government security frameworks
- Experience preparing SSPs, risk registers, and audit ready artefacts
- Confidence engaging with technical and non technical stakeholders in complex environments
We are an inclusive employer committed to fostering a diverse and accessible workplace. We encourage applications from Aboriginal and Torres Strait Islander peoples, people with disabilities, LGBTQIA+ individuals, people of all ages, and those from culturally and linguistically diverse backgrounds.
