Sr. Security Engineer II – IRAP Program Lead (Remote Eligible)

Smartsheet
United States
Workplace: RemoteFull timeUSD 175,000 - 245,000 annuallyFunction: CybersecurityExperience: 5+ yearsEducation: bachelorsSkills: ["Documentation","Communication"]

Own and drive Smartsheet’s IRAP (Australia) and ISMAP (Japan) end-to-end security compliance programs. Lead roadmap execution, assessments, continuous monitoring, quarterly updates, and POA&M remediation management while coordinating with regional assessors and government agencies. Develop and maintain IRAP SSP and ISMAP documentation, build audit-ready evidence libraries, and partner with product and engineering teams to manage system changes affecting authorization and registration status.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Smartsheet
Smartsheet
4 days ago

Sr. Security Engineer II – IRAP Program Lead (Remote Eligible)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 28 minutes agoStatus: Live

Job Summary

Own and drive Smartsheet’s IRAP (Australia) and ISMAP (Japan) end-to-end security compliance programs. Lead roadmap execution, assessments, continuous monitoring, quarterly updates, and POA&M remediation management while coordinating with regional assessors and government agencies. Develop and maintain IRAP SSP and ISMAP documentation, build audit-ready evidence libraries, and partner with product and engineering teams to manage system changes affecting authorization and registration status.
Location: United States
Workplace: Remote
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Own IRAP program strategy and execution, including assessment coordination, remediation, and authorization maintenance.
  • •Own ISMAP program strategy and execution, including registration, compliance, assessment process management, and registry status maintenance.
  • •Coordinate with ASD-endorsed IRAP assessors and JASA-registered ISMAP assessors as the primary contact for government agencies and compliance authorities.
  • •Design and maintain IRAP System Security Plans (SSP) and ISMAP Management Standards documentation mapping architecture to each framework’s control requirements.
  • •Operate continuous monitoring, manage POA&M and remediation closure, and coordinate system changes that impact IRAP authorization or ISMAP registration.

Pay and Benefits

Salary: USD 175,000 - 245,000 annually
Perks:Health InsuranceDentalVision401kParental LeaveLife InsurancePaid Leave

Key Requirements

  • •5+ years of hands-on experience with government security compliance frameworks, with direct involvement in at least two of IRAP (Australia), ISMAP (Japan), FedRAMP (US), or equivalent national frameworks.
  • •Deep knowledge of IRAP and the ISM control framework, including how controls map to cloud architecture.
  • •Strong knowledge of ISMAP, including the ~1200 control requirements and ISMAP-LIU variant.
  • •Proven experience coordinating with regional assessors and translating assessment findings into remediation plans.
  • •Technical foundation in cloud architecture and security, including AWS/Azure/GCP, logging, incident response, and compliance-relevant architectures.
Experience:5+ yearsGovernment complianceCloud securitySaaS security
Education:Bachelor's in Computer Science, Engineering, or a related field
Skills:DocumentationCommunication
Certifications:CISSPCISMCISAISO 27001 Lead Auditor
Languages:EnglishJapanese
Tech Stack:IRAPISMAPFedRAMPInformation Security Manual (ISM)Essential Eight Maturity ModelProtective Security Policy Framework (PSPF)ISO/IEC 27001ISMAP-LIUAWSAzureGCPInfrastructure-as-codeLoggingIncident response

Eligibility

Work Authorization:Authorization required. Sponsorship not provided.

Company Brief

Smartsheet
Provides a cloud-based work management platform that enables teams to plan, track, automate, and report on work. Smartsheet combines spreadsheets, collaboration, and workflow automation to help organizations manage projects and processes at scale.
Industry: Enterprise Software
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Bellevue, United States
Founded: 2005
WebsiteLinkedIn