1 Senior Security Consultant

This Tender is invited by the Issuer. Overview The Australian Prudential Regulation Authority (APRA) is seeking a Senior Security Consultant to act as an independent assurance partner for a collaborative, time-sensitive engagement assessing APRA's proposed Frontier AI risk reduction initiative. About The engagement is delivered through an integrated APRA team, with clear separation between APRA's management responsibilities and the consultant's independent assurance role. The engagement team structure is as follows: Executive Sponsor: Chief Information Security Officer, accountable for executive sponsorship and escalation Project Manager: accountable for the engagement, stakeholder coordination, workshops, governance, APRA's evidence coordination and preparation of Board artefacts Subject Matter Experts: responsible for technical, financial, workforce, risk and delivery inputs to APRA's analysis External Consultant: independent assurance partner responsible for testing APRA's rationale, proposed solutions, control effectiveness, costs, resourcing, assumptions and conclusions, and providing an independent opinion to the Board Purpose The engagement is intended to provide the Board with an independent, evidence-based assessment of whether APRA's proposed Frontier AI risk reduction initiative is strategically justified, technically credible, proportionate, affordable, deliverable and sustainable. Scope The scope includes: Using APRA-provided evidence and stakeholder input to provide independent challenge, benchmarking, assurance conclusions and practical recommendations Identifying material gaps, alternatives and conditions relevant to APRA's proposed initiative Recommending whether the Board should approve, approve with conditions, re-scope, delay or reject the proposal Appendix A defines the detailed assurance scope and required questions. Contractor Requirements Act as an independent assurance partner responsible for testing APRA's rationale, proposed solutions, control effectiveness, costs, resourcing, assumptions and conclusions Must not assume management responsibility or make APRA's risk, funding, technology, product or sourcing decisions Enquiries Buyer contact: procurement@apra.gov.au