Senior Security Consultant

This is a collaborative time-sensitive engagement delivered through an integrated APRA team, with clear separation between APRA’s management responsibilities and the consultant’s independent assurance role.  Executive Sponsor – Chief Information Security Officer, accountable for executive sponsorship and escalation.  Project Manager – accountable for the engagement, stakeholder coordination, workshops, governance, APRA’s evidence coordination and preparation of Board artefacts.  Subject Matter Experts – responsible for technical, financial, workforce, risk and delivery inputs to APRA’s analysis.  External Consultant – independent assurance partner responsible for testing APRA’s rationale, proposed solutions, control effectiveness, costs, resourcing, assumptions and conclusions, and providing an independent opinion to the Board.  The consultant will use APRA-provided evidence and stakeholder input to provide independent challenge, benchmarking, assurance conclusions and practical recommendations. The consultant must not assume management responsibility or make APRA’s risk, funding, technology, product or sourcing decisions.  Provide the Board with an independent, evidence-based assessment of whether APRA’s proposed Frontier AI risk reduction initiative is strategically justified, technically credible, proportionate, affordable, deliverable and sustainable. The consultant must identify material gaps, alternatives and conditions, and recommend whether the Board should approve, approve with conditions, re-scope, delay or reject the proposal. Appendix A defines the detailed assurance scope and required questions.  Key duties and responsibilities Agree the assurance plan, assessment criteria, evidence requirements, rating scale and reporting arrangements with APRA.  Perform the independent review of APRA’s Frontier AI project and challenge set out in Appendix A, using APRA’s evidence and relevant stakeholder input.  Maintain an evidence register and clearly state assumptions, exclusions, limitations, confidence levels and any actual, potential or perceived conflicts of interest.  Provide timely interim findings so APRA can address evidence gaps or factual inaccuracies without compromising the consultant’s independence.  Deliver the final independent assurance report and succinct Board presentation Criteria The buyer has specified that each candidate must provide a one page pitch to address all criteria specified. This is equal to 5000 characters. Essential criteria 1. Relevant personnel security capability and delivery approach 2. Quality, experience and suitability of proposed Personnel Security specialist 3. Governance, compliance, privacy and delivery assurance 4. Pricing and Value for money Opportunity summary Sellers can submit Up to 3 candidates Number of sellers invited Between 5 and 10 Number of candidates submitted Fewer than 10 Send us feedback About Accessibility Privacy Terms of use Disclaimer and copyright An initiative of the Digital Transformation Agency The Australian Government acknowledges the Traditional Owners of Country throughout Australia and acknowledges their continuing connection to land, waters and community. We pay our respects to the people, the cultures and the Elders past and present. © Commonwealth of Australia