Security Specialist, Public Sector

Overview

Mid-level role at Google in Canberra, ACT, Australia. The role involves driving progress, solving problems, mentoring more junior team members, and applying deeper expertise within the relevant area. You will be part of a team of cyber experts that conducts cyber assurance activities for the private cloud services, data centers and underlying networks for customers in Australia.

You will recommend cyber controls and evaluate systems according to the Defence Security Principles Framework (DSPF) Principle 23-ICT Certification and Accreditation, the Information Security Manual (ISM), the Australian Cyber Security Center (ACSC) guidelines, the Protective Security Policy Framework (PSPF) and other controls in agreement. You will contribute to identifying cloud-related security and compliance design/development/deployment friction points and collaborate across teams to resolve them. You will support Google’s Defence Industry Security Program (DISP) membership by maintaining a security program that complies with the DSPF and other related Australian government security obligations as required by legislation or regulation to ensure Google’s ongoing compliance in the Australian market. You will hold the role of a Security Officer (SO) for Google Australia’s DISP membership.

Google Cloud accelerates every organization’s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google’s cutting-edge technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.

Responsibilities

- Conduct or lead the cyber assessments aligned with DSPF, ACSC and ISM standards.
- Support the review of security controls and the development of documentation including System Security Plans (SSPs) and Annex, Security Risk Management Plans (SRMPs) and other Australian government cyber assurance documents.
- Engage with the government to build rapport and guide the customer on the assessment and authorization journey.
- Maintain knowledge of frameworks such as DSPF and DISP, ISM, PSPF and the regulatory landscape with emerging threats and security technology.
- Perform the role of DISP Security Officer, supporting the maintenance of the DISP obligations.

Qualifications

- Bachelor/'s degree in Computer Science, Mathematics, a related technical field, or equivalent practical experience.
- 8 years of experience in customer-facing roles including interfacing with executive stakeholders and managing and delivering IT technical implementations, transformation programs, or related initiatives.
- Experience in supporting enterprise customers in Cloud Professional Services organizations, IT consulting, or program management organizations.
- Certification in IRAP qualifications or related Certified Auditor qualification such as SANS, ISO 27001, CRISC, etc.
- Experience with DISP Security Officer, PSPF and Security Construction and Equipment Committee (SCEC) training, or endorsed SCEC consultant.
- Excellent partner management, follow-through, resource management and communication skills with attention to detail.

About Google

Google Cloud accelerates every organization’s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google’s cutting-edge technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.

EEO and Recruitment

Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative of the users we serve, creating a culture of belonging, and providing an equal employment opportunity regardless of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law. See also Google's EEO Policy and related resources.

Google requires English proficiency for all roles unless stated otherwise in the job posting.

To all recruitment agencies: Google does not accept agency resumes. Do not forward resumes to our jobs alias, Google employees, or any other organization location. Google is not responsible for any fees related to unsolicited resumes.

#J-18808-Ljbffr