Years of Experience: 5 to 8 years
FTE: 2
Security Clearance: Baseline (with willingness to upgrade to NV2) 
Working Arrangement (Remote, Onsite, Hybrid): Onsite (5 days per week)
iDiC Client Name: Client has requested not to be identified in adverts - contact Talent@idic.com.au for further information.  
Rate Information: $100 to $140/hr ex GST to iDiC (guide only, value for money assessment applies)
Exclusivity: iDiC sole external sourcing channel
Additional Notes: Experience working within Australian Government security frameworks and accreditation processes. Interviews expected within 2 weeks of submission 
Onboarding Requirements: ID, Working Rights & 2 Completed Reference Checks required at Offer Stage.
Permission to Represent (PTR): Please upload a signed PTR, including the role title to the Cover page section after clicking "apply"

POSITION OVERVIEW

Accenture is seeking an experienced Security Assessment and Authorisation (A&A) Consultant to support security risk management, compliance, and accreditation activities across systems, applications, and third party services. The role is responsible for ensuring systems meet security requirements, risks are assessed and documented appropriately, and Authority to Operate (ATO) requirements are achieved and maintained. The successful candidate will work closely with project teams, security specialists, architects, and stakeholders to ensure alignment with Australian Government security frameworks and organisational compliance obligations.

ABOUT THE CLIENT

The client operates within a systems integration services environment, delivering secure, enterprise scale technology solutions. They support complex infrastructure across government or highly regulated sectors, with a strong focus on standardisation, automation and security.

KEY RESPONSIBILITIES

• Conduct security risk assessments across projects and operational environments.
• Identify, evaluate, document, and mitigate cybersecurity risks.
• Facilitate risk workshops with stakeholders and project teams.
• Monitor and report risk treatment activities and residual risks.
• Support implementation and testing of security controls.
• Assist with day to day project coordination activities alongside managers and program leads.
• Execute security assessment and authorisation activities in accordance with the Australian Government Information Security Manual (ISM) and applicable client requirements.
• Prepare, maintain, and update accreditation and risk management documentation.
• Ensure compliance with governance, protection, detection, response, and security control requirements.
• Develop and maintain security policies, procedures, and supporting documentation.
• Support security compliance requirements for classified and controlled information.
• Maintain audit evidence, authorisation records, and accreditation artefacts.
• Provide guidance on ISM, Essential Eight, PSPF, and organisational security controls.
• Support the implementation and ongoing management of Governance, Risk and Compliance (GRC) tooling.
• Track and report on security authorisation status, compliance gaps, and security deliverables.
• Assist with continuous monitoring, audit preparation, and inspection activities.

ESSENTIAL REQUIREMENTS

• Current Baseline Security Clearance with willingness to upgrade to NV2.
• Bachelor's degree in Cybersecurity, Information Technology, or a related discipline.
• Strong understanding of Australian Government security frameworks, including:
  • Information Security Manual (ISM)
  • Protective Security Policy Framework (PSPF)
  • Essential Eight
  • NIST security principles and frameworks
• Experience performing security assessments, risk management, and system accreditation activities.
• Experience preparing and maintaining security accreditation documentation and risk assessments.
• Understanding of Authority to Operate (ATO) and security authorisation processes.
• Strong stakeholder engagement and communication skills.
• Excellent documentation, organisational, and reporting skills.
• Experience working with collaboration platforms such as SharePoint and Confluence.
• Ability to work onsite five days per week.

DESIRABLE SKILLS

• CISM certification.
• CRISC certification.
• CISSP certification.
• IRAP Assessor accreditation or equivalent experience.
• Experience with Governance, Risk and Compliance (GRC) platforms.
• Experience supporting audits, inspections, and compliance reviews.
• Knowledge of classified information handling requirements.
• Strong analytical and problem solving skills.
• Experience working within Australian Government or Defence environments.