- Security Operation Manager
- 12-month contract with possible extensions
- Based in Sydney CBD / Parramatta – Hybrid
- Develop, implement and monitor reporting mechanisms for governance, security and risk practices to support compliance and highlight areas of exposure.
- Develop and lead a mixed team of security engineering resources, with a focus on excellence, automation and metrics.
- Identify security requirements for information technology systems in all phases of the System Life Cycle.
- Provide guidance in the implementation of technical information security solutions and controls.
- Review identified security risks and breaches to ensure the organisations assets and information are always appropriately secured.
- Respond to security threats and carry out information security investigations to ensure risks are managed and adverse impact minimised.
- Provide support for internal and external audit activities to maintain and improve the ISMS and continuous improvement of cyber security controls.
- Maintain currency and applicability of subject matter knowledge and the links to legislative legal and statutory changes relating to information security and management.
- Extensive experience in an Information Security position in a comparative organisation with significant experience in a security management position.
- Experience with technology and security related best practice frameworks such as ITIL and ISO27001.
- Extensive working experience and practical understanding of computer networking concepts and protocols, and network security methodologies.
- Demonstrated experience in the Australian regulatory environment.
- Expert level working experience and practical understanding of technology, trends and threats related to technology risk management.
- Experience with technology related best practice frameworks such as ITIL, ISO27001 and the NIST Cyber Security Framework.
- Extensive experience in Information Security and Risk, preferably in a mid to large organisation in Insurance, Banking and Finance industries.
- Proven experience in interpreting and implementing regulatory requirements, such as CPS 234.
- Practice leader or manager of Cybersecurity or Information Security of a leading consultancy.
- Information Security Risk Manager of an Australian Government Department or a mid to large Agency.
If you would like to apply, please contact Sonali Jain -sjain@quayappointments.com.au
