Cyber Security Assessor - NV1

Location: Canberra / Hybrid, subject to engagement requirementsEngagement: Contract / ConsultingSecurity Clearance: Current Australian Government NV1 or higher – mandatoryMaster2Manage is expanding its cyber security capability to support upcoming Australian Government and Defence-sector engagements.We are seeking experienced Cyber Security Assessors with strong knowledge of Australian Government security frameworks and demonstrated experience assessing ICT systems, security controls, risks and compliance.
The RoleDepending on the engagement, you may:• Conduct cyber security assessments against the ASD Information Security Manual (ISM), ACSC Essential Eight, PSPF and related Australian Government security requirements.• Assess implementation and effectiveness of security controls and supporting evidence.• Perform security risk and compliance assessments and identify control gaps and residual risks.• Prepare assessment findings, risk statements and practical remediation recommendations.• Develop or review security documentation including SSPs, SRMPs, SRAs, risk registers and accreditation artefacts.• Support system accreditation and Authority to Operate (ATO) activities.• Review remediation evidence and support closure of identified security findings.• Work with GRC, architecture, technical and project teams to provide clear and defensible assurance advice.
About YouYou will ideally bring:• A current Australian Government NV1 security clearance or higher.• Demonstrated cyber security assessment, assurance, compliance or security risk experience.• Strong working knowledge of the ISM and Essential Eight.• Understanding of the PSPF and Australian Government security environment.• Experience evaluating cyber security controls and evidence.• Strong analytical, report-writing and stakeholder engagement skills.Experience with IRAP-aligned assessments, system accreditation, ATO processes, cloud security, Microsoft 365/Azure, GRC or security architecture will be highly regarded.Relevant certifications such as CISSP, CISM, CRISC, ISO 27001 or equivalent are also desirable.
The OpportunityMaster2Manage is growing a trusted network of security-cleared cyber professionals to meet current and upcoming client requirements across cyber security assessment, assurance, GRC and security architecture.Engagements will vary according to project requirements, specialist skills, clearance, availability and location.
ApplyApply directly through this LinkedIn advertisement with your current CV.Alternatively, send your CV confidentially to:careers@master2manage.com
We are also recruiting Cyber Security GRC Consultants and Security Architects.View our broader cyber security opportunities here: https://www.linkedin.com/posts/master2manage-pty-ltd-australia_cybersecurity-grc-securityarchitecture-activity-7492110138279944192-I-sI?utm_source=share&utm_medium=member_desktop&rcm=ACoAABKxMukBrQBPVWJYFb-VLD64hR3rXc6KfhM