Security Lead

Company Description

At Leidos, we do work that really matters inspired by our mission to make the world safer, healthier, and more efficient through technology, engineering, and science. With 25 years of local experience, our 2000 team members, work together to solve Australia’s toughest challenges in government, defence, intelligence and border protection. We’re robust and ambitious, and we empower our people to do their best work. You’ll feel inspired by what you can achieve and will be supported by an inclusive and flexible culture that genuinely cares for your wellbeing. Together, we can be the difference.

We've got so much to offer at Leidos, here are a just a few of the **Benefits** we provide our team:

- ** Life Days** are the Leidos way of recognising that we all need some extra time out to take care of life. By working slightly more than the minimum weekly hours (2 hours per week for full timers) you can accrue up to **an extra 12 days of leave** per year.
- ** Professional development** and support to set you up for success and assist you in achieving your career aspirations.
- ** Flexible work** arrangements to support work life balance enabling you to feel supported and achieve balance.
- ** BUPA corporate insurance** plan offering employees access to a suite of corporate products not available to the general public.

**Job Description**:
**Your New Role**

Working on a Federal Government project, a Governance, Risk and Compliance position is focused on providing project support for the delivery of secure, compliant and accredited classified systems. Specifically, the role will support the delivery of a development environment hosted on our partners cloud and on-prem infrastructure and include the following tasks:

- Development of Security certification and accreditation documentation with the necessary activities, artefacts and stakeholder contributions required to complete the certification and accreditation process for the assigned projects and systems.
- Ownership for the execution of the Accreditation process with reporting as required by the business, project, Certification Authority or other applicable stakeholders.
- Engagement with key stakeholders to tailor the system scope and approach to delivering security controls, artefacts, risk identification and assessment, security testing and responsibility for risk treatment recommendations.
- Advising engineering teams on secure development and engineering practices and tools.

**Qualifications**:
The following experience is required for GRC personnel:

- Delivering systems into strictly governed environments, such classified Federal Government networks and systems
- Adopting security standards and frameworks, such as the Protective Security Policy Framework (PSPF), Information Security Manual (ISM), and ISO 27001.
- Advocating for security and compliance requirements within the project and advocate for the project’s approach with external stakeholders.
- Communicating sensitive matters respectfully and professionally, enabling decision-makers to understand the security implications of their choices before delivering their decisions
- Providing structural guidance to help project planning, documentation and delivery elements but maintain flexibility to support the delivery approach prescribed by the business.
- Working in cloud environments and leveraging cloud security solutions and controls.
- Working in a agile or dynamic project environment, such as Scrum, DevSecOps etc.

Additional Information

We’re a certified Family Friendly Workplace. We respect the caring responsibilities and needs of our people who needs to care for loved ones; it’s a mindset - not a policy. When you grow, we grow. Be it through our exciting pipeline line of projects or by partnering with a People Leader who will guide, mentor and support you

We’ve been keeping Australia safer, healthier and more efficient for 25 years, here’s just three ways how:

- We’re responsible for the ongoing support and uplift of the Australian Defence Force’s two largest classified networks.
- We work with the Australian Department of Defence to design and operate the cyber security tools used across the Army, Navy and Air force.
- We undertake real and simulated cyber war gaming with operational Australian Defence Force units.
- We are helping the ATO across their transformational roadmap of activities to uplift the end user environment.

Applicants may also need to meet International Traffic in Arms Regulations (ITAR) requirements. In certain circumstances this can place limitations on persons who hold dual nationality, permanent residency or are former nationals of certain countries as per ITAR 126.1.