Security Architect

The Security Architect will be responsible for designing, building, and overseeing the NCIS security infrastructure, ensuring systems are resilient against threats Technical Skills: Essential: Demonstrated experience in designing and overseeing the implementation of enterprise-wide ICT security solutions in a multi-agency environment, including the ability to define a program of work to achieve tangible and measurable business benefits.Ensuring that the NCIS solution is fit for purpose from a security perspective and meets policies and compliance requirements including: Information Security Manual (ISM) and Infosec Registered Assessors Program (IRAP);Australian Criminal Intelligence Commission (ACIC) and Home Affairs Security Accreditation Frameworks; o Partner security and compliance requirements Demonstrated ability to develop and manage security architecture technical designsExperience in design and engagement with existing Enterprise Security capabilities (including SIEM and SOC)Experience in designing and supporting organisations developing and supporting security capability through Scaled Agile and DevOps methodologies Desirable: Familiarity and experience using architecture frameworks and notation methods (such as TOGAF, AGAF, SABSA, NEAF, etc.) Key duties and responsibilities Supporting the program in definition of effective ICT Security capabilities and solutions to meet capability and business requirements;Ensuring that the NCIS solution is fit for purpose from a security perspective and meets policies and compliance requirements including: ISM and IRAP;Australian Criminal Intelligence Commission (ACIC) and Home Affairs Security Accreditation Frameworks;Partner security and compliance requirements Collaborating with Program and ACIC and Home Affairs Enterprise Solution/System Architects and business stakeholders to ‘drive holistic technology implementation across Value Streams’;Supporting ACIC and Home Affairs architecture strategies including: Choice of technology, System/Solution Architecture Strategy, Development and Deployment Infrastructure Strategy, Inter-program collaboration, and Implementation Strategy;Design and support implementation of key security capabilities for NCIS including: Federated Identity and Access Management, Gateways and Firewalls, Security Information and Event Management (SIEM), Intrusion Detection/prevention, Threat and Virus analysis and Encryption (at rest and in transit) on Azure Cloud;Coordinating security accreditation activities across the program;Developing key security documents (SSP Annex, SSP, SRMP, SOPS) that underpin the security accreditation and architecture governance processes;Identifying security risks and drivers and communicating to Stakeholders how NCIS addresses these concerns;Identifying innovative technology solutions and development initiatives and maintaining a high-level, holistic vision of this working closely with ACIC and Home Affairs stakeholders in these technologies and capabilities;Providing leadership to development and business specialists in the project on delivery of key security outcomes;Design and execution of transition of security management of NCIS into service with ACIC, Home Affairs and other stakeholders;Designing and documenting of all security architecture components in the Technical Security Design;Delivering quality Security Architecture deliverables as per the Security Accreditation Framework;Providing effective and accurate advice supporting Architectural decisions impacting technology selection, program scope and solution design relating to security componentsManaging key architectural security risks;Managing program security risks;Managing security accreditation processes;Ensuring alignment to enterprise security standards and strategies. The ACIC requires specified personnel to: Obtain the ACIC’s Organisational Suitability Assessment (OSA) prior to commencement.Have an Australian Government security clearance (AGSVA) to the minimum of Negative Vetting Level 1 (NV1) or be willing to undergo and obtain and AGSVA NV1 clearance.As directed by the ACIC, complete a Deed of Confidentiality or Non-Disclosure Agreement prior to commencement or comply with processes required to engage the Specified Personnel under section 48 of the Australian Crime Commission Act (2002). Note: Seller may be required to meet the cost of any security clearances