Ict Security Documentation Writers

Analytics Project and Unified Communications Project
- 12 months + 2 x 12 months extensions
- NV1 required

Our Federal Government client requires
**two experienced ICT Security Documentation Writers** to assess and identify any security risks or vulnerabilities associated with the implementation of two of their high-profile projects:
**Project 1**
This platform will deliver a federated search tool capability that searches across selected on-premise datasets. The roles and responsibilities under this project involve:

- Undertaking an assessment of any risks and vulnerabilities associated with the implementation of the AAITP system within the Department's standard operating environment including:
- Security Design of the AAITP
- Assessment of the effectiveness of the controls in scope
- Assessment of the resultant risk of ineffective controls
- Provision of recommendations to provide additional control effectiveness
- Developing a core security document set for approval by the Department.
- Have five or more years as an ICT Security Documentation Writer working in security-related projects or roles, delivering ICT security-related documentation, including Security Risk Management Plans and Statements of Applicability, System Security Plans, Incident Response Plans and Continuous Monitoring Plans.
- Extensive knowledge of:

- Operating system, data and database security, security protocols and principles.
- Previous experience and familiarity with ISM Controls, E8 and PSPF Framework and IRAP process.
- Hold an IT tertiary qualification and have a technical background in data management, designing and implementing security solutions.
- Communications skills of a high order, both written and verbal. Demonstrated capability to translate complex IT matters so those without an IT background can understand them.
- Certifications such as CISSP, GSEC, CEH or CISM are desired.

**Project 2** - This project will uplift voice and video services across the agency to transform communication infrastructure to deliver a new platform that will support seamless integration with Microsoft Teams and Microsoft 365 with call/contact centre services and examination rooms. The roles and

responsibilities under this project involve:

- Security Design for the UC project work packages
- Assessment of the ISM controls in scope
- Assessment of the residual risks associated with ineffective and partially effective controls
- Provision of recommendations to provide additional control effectiveness and mitigation plan
- Developing a core security document set for approval by the Department.
- Have five or more years as an ICT Security Documentation Writer working in security-related projects or roles, delivering ICT security-related documentation, including Security Risk Management Plans and Statements of Applicability, System Security Plans, Incident Response Plans and Continuous Monitoring Plans.
- Have three or more years of experience in telecommunications network assurance, MS Teams, unified communications projects and call/contact centre operations (optional)
- Previous experience and familiarity with ISM Controls, E8 and PSPF
Framework and IRAP process.
- Extensive knowledge of:

- MS Teams and Microsoft 365
- Telecom OSS. Network security protocols and principles
- Intrusion detection and notification systems to manage DDoS and DoS attacks
- Hold an IT tertiary qualification as a preference and have a technical background in designing and implementing security solutions.
- Communications skills of a high order, both written and verbal. Demonstrated capability to translate complex IT matters so those without an IT background can understand them.
- Certifications such as CISSP, GSEC, CEH or CISM are desired.

**At a minimum, the ICT Security Documentation Writers will need to**:

- Understand the project landscape and operating environment
- Identify and assess security risk(s), threat(s), and produce appropriate certification and accreditation documentation that is fit for purpose.

If the roles spark your interest, please don't hesitate and