Application closing date: Thursday, 26 September 2024 • 11:59pm, Canberra time (in Canberra)
Estimated start date: Monday, 21 October 2024
Location of work: ACT
Working arrangements: The successful candidate will work 5 days per week and up to a maximum of 40 hours per week, unless otherwise agreed with their manager. The role is Canberra based with no work from home provisions.
Length of contract: 12 months
Contract extensions: 1 x 12 months
Security clearance: Must have Positive Vetting
Rates: $140 - $160 per hour (inc. super)

The Australian Signals Directorate (ASD) is a statutory agency in the Defence portfolio that defends Australia against global threats and advances our national interests through the provision of foreign signals intelligence, cyber security and offensive cyber operations. ASD is seeking an ICT system security specialist to work across multi-disciplinary teams. They will be responsible for providing expert advice and guidance on IT system security issues.
Duties and Responsibilities (include but not limited to):

• Manage and develop ICT system security activities
• Achieve an Authority to Operate (ATO)
• Develop a System Security Plan (SSP)
• Assess compliance with ICT security requirements
• Lead the application and compliance of security operations procedures and review information systems for actual or potential security controls to achieve ATO
• Negotiate with ICT engineers and ICT Security in the development and approval of Concept of Operations, SSPs and Executive Briefs

Other Requirements:

• Candidates require an AGSVA TSPV clearance to perform this role. ASD will not sponsor candidates to upgrade their security clearance
• Candidates must be willing to undergo an Organisational Suitability Assessment (OSA) prior to engagement

Information on ASD's Organisational Suitability Assessment (OSA):

An OSA is an ASD policy requirement conducted to determine a person's suitability to work in ASD. The OSA requires a psychological assessment, which involves a questionnaire and an interview.
Before submitting an application for this role, candidates should consider their preparedness for questions that may include the following topics: personal relationships, living circumstances, personal values, financial situation, physical and mental health history including substance use, and any civil

Essential Criteria

• Demonstrable experience in ICT security activities with a focus on Linux and Windows operating systems
• High level of knowledge on ICT security threat and risk assessments and the ability to recommend mitigation/remediation strategies
• Experience in production of complex technical documentation

Desirable Criteria

• Formal training/professional certification (e.g. IRAP Assessors)