Hudson is working with a large Australian authority, working with the Cybersecurity and Assurance Manager and other stakeholders to integrate security controls to their applications development framework. Controls will be aligned with the Australian Government Information Security Manual (ISM) and will be targeted to achieve an agreed level of maturity against the Open Web Application Security Projects, Software Assurance Maturity Model (OWASP SAMM). Responsibilities Lead the development of a prioritized list of activities to implement agreed controls, work practices, and resources, ensuring compliance with ISM controls and achieving the desired maturity level under SAMM. Collaborate with stakeholders to implement these activities, introducing new practices, tools, and procedures. Monitor and advise on workflows to maintain the agreed maturity level and ensure accurate documentation, making adjustments as necessary until security practices are fully integrated. Take direction from the Chief Information Officer and the Cybersecurity and Assurance Manager, while also being proactive in addressing issues or concerns and providing relevant, reasonable, and competent advice as needed, whether requested or not. Desirable attributes Extensive experience with security tools, methods, and documentation relivant to a DevSecOps workflow (5 years) Proven understanding of the OWASP SAMM. Strong communication skills, including the ability to negotiate outcomes among diverse stakeholders and to write effectively. Demonstrated understanding of the Information Security Manual. Additional details: Initial 12-month contract with additional 12-month extension Competitive daily rates with flexible working arrangements Large federal agency, considering applicants from Canberra, Melbourne and Launceston If this opportunity resonates with you, please apply directly or reach out to Alex on alex.nesevskihudson.com for a confidential discussion.