1 Principal Security Analyst Cyber Advisor

Cyber Advisors provide ICT security advice and assistance to government, including policy creation, project advice and assistance, and research.

Key duties and responsibilities

The Services, delivered in collaboration with and under supervision by nominated AFP personnel, include, but are not limited to, the following:

• Conduct cybersecurity risk assessments and system security plans in alignment with the ISM and PSPF.

• Perform certification and accreditation activities for government systems, ensuring compliance agency requirements.

• Analyse vulnerabilities, threats, and security controls to determine residual risk against protective security obligations.

• Develop and maintain accreditation documentation, including risk assessments, security plans, and compliance evidence.

• Support audits, IRAP assessments, and security reviews to validate compliance with government security frameworks.

As part of the services, the seller must ensure the specified personnel

• Maintains currency in information technology processes and technical knowledge through ongoing professional development.

• Establishes and maintains effective business relationships and professional networks.

• Contributes to and implements improved ICT practices and procedures.

• Provides mentoring, coaching and training.

• Works effectively in a small team environment, and wider Command environment.

• Remains accountable for accurate completion of work within timeframes and quality requirements, shares own expertise with others and guides and mentors less experienced buyer employees; and

• Records and maintains files/information in accordance with buyer requirements.

AFP Work Level Standards 

AFP Band 8 Work Level Standards to apply.

The AFP reserves the right to engage further suppliers for the same services if required utilising this RFQ. Any offer of engagement will be made within 6-months of the RFQ release date.

Technical skills

Technical skills candidates would need to have (including but not limited to) are listed below:

• Security architecture and secure-by-design
  Network security and enterprise infrastructure security
  Cyber threat and risk assessment
  Security monitoring and SIEM technologies
  Cyber governance, compliance and assurance