One (1) Cyber Security Expert

⁠⁠⁠** IMPORTANT NOTE: Seller must complete and submit the attached Home Affairs Seller Response Form to address the requirements. If the response form is incomplete or not submitted, then seller’s submission may not be accepted. Please always use the current version attached to the opportunity as the form can be updated at any time.

The Specified Personnel will be responsible for providing the following deliverables including but not limited to:

• Assisting the IRAP Assessor in assessing high risk and complex proposed changes (notifications) to networks and services from telecommunications carriers to identify risks which could make them more vulnerable to espionage, sabotage and foreign interference;
• Assisting industry stakeholders to take an all hazards approach (both natural and human induced hazards) to identifying and mitigating material risks to the availability, integrity, reliability or confidentiality of their network assets or information associated with their network assets;
• Assisting with the development of a detailed risk assessment framework for the Telecommunication Security Section (TSS) team to use, subject to passage of Protecting Critical Infrastructure and Systems of National Significance reforms for the telecommunications sector;
• Providing advice and guidance to telecommunications carriers on the selection, design, justification, implementation and operation of security controls and risks management strategies to maintain the confidentiality, integrity and availability of telecommunication networks and systems;
• Collaborating with internal and external stakeholders to develop appropriate risk mitigation strategies to manage national security threats and vulnerabilities, including designing a comprehensive risk control guidance for TSS staff to assist in identifying risk haps and initiate control measures for industry;
• Providing expert advice to stakeholders on appropriate risk mitigation strategies for proposed changes;
• Building capacity and resilience within the Critical Infrastructure Security Operations Division to address national security issues within Australia’s critical telecommunications infrastructure;
• Building capacity and supporting staff development of relevant technical knowledge and skills within the TSS section;
• Contributing to the development of best practice guidelines for assessing security compliance within the legislative framework;
• Ensuring appropriate documentation is stored in accordance with the Department’s recordkeeping policy and practices;
• Conducting ongoing risk assessments involving 5G and high risk vendors.

Specified Personnel will be expected to transfer skills and knowledge to departmental staff and ensure appropriate documentation is stored in accordance with the Department’s recordkeeping policy and practices.

The Specified Personnel will also be responsible for producing the following deliverables, including but not limited to:

• Best practice guidelines;
• Formal written assessments of proposed changes to telecommunications networks;
• Written and verbal technical analysis in support of regulatory action on changes to telecommunications networks;
• Regulatory and policy advice on telecommunications and/or data security issues;
• Strategic analytical products considering the risks posed by foreign involvement in critical infrastructure sectors;
• Detailed technical advice to inform policy and regulatory decisions and assist industry to understand threats and comply with regulatory obligations;
• Guidance products for critical infrastructure operators on cyber security, data security and/or security risk management;
• Written and verbal technical input during discussions with critical infrastructure operators on the security of their operations.

Delivery timings of documents to be agreed with Manager.