IRAP System Security Plan (SSP) Consultant
- Up to $1,000 per day
- Contract, ASAP start
- Remote anywhere on the east coast, Melbourne preferred
- Baseline clearance required
The opportunity
We’re partnering with a global information management organisation. Their IRAP reassessment is scheduled for Q3 next year. They need an experienced security compliance specialist to get their System Security Plan in shape well before then.
You’ll review the outcomes of the last assessment and update the SSP. You’ll also work through an annex of more than 1,000 controls and pull in the ones relevant to remediation. Finally, you’ll map the system against the latest government control requirements so nothing is missed when the IRAP assessor arrives.
You’ll report to the security lead and work with teams in the US, UK and India, so you’ll need to communicate clearly across time zones.
What you’ll be doing
- Reviewing the previous IRAP assessment report and findings, and turning them into a clear remediation picture
- Updating the SSP and its control annex to reflect the current system, risks and environment
- Assessing whether each of the 1,000+ controls applies, and documenting implementation status and evidence
- Aligning the SSP with updated Australian Government control requirements (ISM and related frameworks)
- Working with teams in the UK and India to gather evidence and track remediation
- Preparing the system and documentation for the upcoming IRAP reassessment
What you’ll bring
- Current Australian Government Baseline clearance (essential)
- Hands-on experience writing and maintaining System Security Plans for government systems
- Strong working knowledge of the ISM, plus exposure to PSPF and Essential Eight
- Experience supporting IRAP assessments or reassessments, including remediation planning
- The patience and rigour to work through a very large control set accurately
- Confident stakeholder skills with distributed, international teams
Nice to have
- IRAP Assessor endorsement, or experience working closely with assessors
- A background with outsourced or managed service providers
- Exposure to records, data or information management environments
Apply
This one is moving quickly. Apply now for more info.
At Randstad Digital, we are passionate about providing equal employment opportunities and embracing diversity to the benefit of all. We actively encourage applications from any background.
...