Senior Cyber Security Analysts

The Australian Criminal Intelligence Commission (ACIC) requires an experienced Cyber Security Assurance and Technical Documentation Analyst to support cyber security compliance, assurance, accreditation and governance activities across enterprise and project-based technology initiatives. The role will have a strong technical writing and documentation focus and will be responsible for developing, maintaining and reviewing cyber security artefacts supporting Microsoft cloud environments, including Microsoft 365, Microsoft Entra ID, Azure, Microsoft Fabric, Microsoft Purview and associated services. The role will be responsible for developing and maintaining security accreditation artefacts, supporting cyber assurance activities, coordinating security assessments and contributing to the uplift of enterprise cyber security governance and operational security capabilities. This aligns with the CIA Firearms Licensing Project's delivery and assurance objectives. Key duties and responsibilities The successful candidate will be responsible for undertaking activities including, but not limited to: Developing, reviewing and maintaining cyber security documentation and accreditation artefacts, including System Security Plans (SSPs), Security Risk Assessments (SRAs), and Plan of Action & Milestones (POA&Ms). Supporting Authority to Operate (ATO) and Interim Authority to Operate (IATO) activities. Assisting with cyber security risk management, assurance and compliance activities. Developing and maintaining security operating procedures, standards and supporting documentation. Supporting the development and enhancement of security monitoring and continuous monitoring capabilities. Coordinating vulnerability assessments, penetration testing and remediation activities. Contributing to the development and maintenance of enterprise cyber security artefacts, including incident response, business continuity and disaster recovery documentation. Supporting cyber security governance, reporting and audit activities. Providing cyber security advice and guidance to project stakeholders. Establishing and maintaining productive working relationships with internal and external stakeholders, including vendors, service providers and system integrators. Preparing reports, briefing materials and documentation to support project and governance outcomes. Contributing to continuous improvement initiatives that strengthen cyber security and assurance practices. The ACIC requires specified personnel to: Obtain the ACIC’s Organisational Suitability Assessment (OSA) prior to commencement. Have an Australian Government security clearance (AGSVA) to the minimum of Negative Vetting Level 1 (NV1) or be willing to undergo and obtain and AGSVA NV1 clearance. As directed by the ACIC, complete a Deed of Confidentiality or Non-Disclosure Agreement prior to commencement or comply with processes required to engage the Specified Personnel under section 48 of the Australian Crime Commission Act (2002). Note: Seller may be required to meet the cost of any security clearances Criteria The buyer has specified that each candidate must provide a response to each criterion. Each response is limited to 3000 characters. Essential criteria 1. Demonstrated experience delivering cyber security assurance, accreditation, governance and risk management activities within Microsoft Azure cloud environments. 2. Experience developing and maintaining cyber security documentation and accreditation artefacts, including System Security Plans (SSPs), security risk assessments and Authority to Operate (ATO) documentation. 3. Strong understanding of Microsoft cloud security services including Microsoft Azure, Microsoft Entra ID, Microsoft Defender, Microsoft Purview and Microsoft 365 security capabilities and across data platforms (such as Microsoft Fabric and Purview). 4. Demonstrated knowledge of Australian Government cyber security frameworks and standards, including the Information Security Manual (ISM), Protective Security Policy Framework (PSPF) and security accreditation processes. 5. Whole of life costs to the Commonwealth. Desirable criteria 1. Experience supporting Commonwealth Government, intelligence, law enforcement, national security or other highly regulated environments. 2. Relevant tertiary qualifications and/or industry certifications in cyber security, information security or a related discipline (e.g. CISSP, CISM, CCSP, Security+). Opportunity summary Sellers can submit Up to 2 candidates Number of sellers invited Between 5 and 10 Number of candidates submitted Fewer than 10 RFQ closing time 01 Weeks 06 Days 06 Hours Send us feedback About Accessibility Privacy Terms of use Disclaimer and copyright An initiative of the Digital Transformation Agency The Australian Government acknowledges the Traditional Owners of Country throughout Australia and acknowledges their continuing connection to land, waters and community. We pay our respects to the people, the cultures and the Elders past and present. © Commonwealth of Australia