About Accenture
Accenture is a global professional services company with leading capabilities in digital, cloud and security. Combining unmatched experience and specialised skills across more than 40 industries, we offer Strategy and Consulting, Technology and Operations services and Accenture Song — all powered by the world’s largest network of Advanced Technology and Intelligent Operations centers. Our 799,000 people deliver on the promise of technology and human ingenuity every day, serving clients in more than 120 countries. We embrace the power of change to create value and shared success for our clients, people, shareholders, partners and communities. Visit us at www.accenture.com.
Join Accenture and help transform leading organisations and communities around the world. The sheer scale of our capabilities and client engagements and the way we collaborate, operate and deliver value provides an unparalleled opportunity to grow and advance. Choose Accenture and make delivering innovative work part of your extraordinary career.
Job Description:
We are seeking an experienced and results-driven Security Assessment and Authorisation (A&A) consultant, to perform security risk management and assurance activities across systems, applications, and third-party services. The role ensures that systems meet required security standards; risks are properly assessed and documented, and appropriate authority to operate (ATO) are obtained and maintained.
This position works closely with system owners, architects, project teams, cybersecurity specialists, and compliance stakeholders to guide them through the A&A lifecycle and ensure alignment with organisational, regulatory, and Australian government frameworks.
Key Responsibilities:
- Security Risk Management
- Conduct risk assessments to identify, evaluate, and mitigate security risks across projects and operational environments.
- Facilitate risk workshops with stakeholders to capture and validate security risks.
- Monitor and report on risk status, treatment progress, and residual risk to governance forums.
- Ensure security controls are implemented and tested to mitigate identified risks effectively.
- Help project manage day to day tasks with the manager and program leads.
- Security Assessment and Authorisation
- Execute system security authorisation processes in accordance with ISM (Information Security Manual) and the client's security requirements, including Risk Management Framework (RMF) steps.