Cyber Security Operations Coordinator, Strategy, Delivery and Cybersecurity / Cybersecurity Operations
State Government of Victoria ¡ Posted today
About the role
About the role: The Cyber Security Operations Coordinator will support the Manager, Cyber Security Operations... in coordinating and delivering day-to-day cyber security operational services across the department. The role will assist with the
cyber security business analyst
Randstad ¡ Posted 1 days ago
About the role
, supporting the delivery of key Information and Cyber Security initiatives. This role will involve working closely with business... and proposed solutions. Collaborate with Cyber Security teams, solution architects, project managers and external vendors
SOC Analyst (Level 1, 2 & 3) - MSSP - Leading Cyber Security Provider
Saul Recruitment ¡ Posted 1 days ago
About the role
Saul Recruitment - Specialising in recruiting top Cyber Security talent across Oz & NZ! Looking for a role... where you can build your cyber security career, work alongside experienced professionals and help protect organisations from real
Senior Cyber Security Engineer
Bank of Queensland ¡ Posted 2 days ago
About the role
, and our Cyber Security Operations team plays a critical role in making that happen. As a Cyber Platform Engineer, you'll design..., develop and support the cyber security platforms that help protect our customers, people and business. Working across a broad
Project Manager - Cyber Security
XPT Software ¡ Posted 4 days ago
About the role
delivery of cybersecurity projects and programs. â Manage WAF, DDoS, ADR, and NDR security initiatives. â Drive project... and rollout of cybersecurity solutions. â Ensure projects meet security requirements, timelines, and quality standards
Cyber Security Program Director
St Vincent's Health Australia ¡ Posted 5 days ago
About the role
Job Description: About the role As the Cyber Security Program Director, you will be responsible for the development..., management, coordination, delivery and direction of St Vincentâs Health Australiaâs Cyber Security program. Your leadership
Senior Cyber Security Engineer - Contract - Melbourne, Adelaide
Hastha Solutions ¡ Posted 6 days ago
About the role
Urgent requirement of Senior Cyber Security Engineer - Contract - Melbourne, Adelaide Requirements Business..., vendor access, remote support, and safety-critical industrial environments. Cyber Security Engineering ¡ Design
Manager - OT Cyber Security
Consolidated Power Projects ¡ Posted 7 days ago
About the role
. Job Description This is a brand-new position, created to give CPP a clearly named Manager - OT Cyber Security lead across all customer project... delivery. You'll build and maintain an executive-endorsed OT cyber security management program, and embed secure-by-design
EL1 Lead Cyber Security Architect
Softtestpays ¡ Posted 9 days ago
About the role
Australian Citizens residing in Australia only respond. Job details Role/s: 1 x EL2 Cyber Security Architect The... EL2 Cyber Security Architect (Labour Hire) is accountable under broad direction to undertake work with a high level
Senior Systems Analyst - Cyber Security
GoSourcing ¡ Posted 11 days ago
About the role
Agency's Cyber Uplift Program and broader cyber security objectives. They work closely with business stakeholders, architects..., engineers, security specialists and delivery teams to translate cyber security, compliance and operational requirements into fit
Cyber Incident Response Lead
Hays ¡ Posted 12 days ago
About the role
, triage, containment and recovery of cyber incidents in line with the department's Cyber Security Incident Response Plan... to strengthen security posture. What you'll need to succeed Proven experience leading cyber incident response, including CSIRT
Digital Identity Service Delivery Manager - Cyber Security - Technology Consulting
EY ¡ Posted 12 days ago
About the role
opportunity Join EY's growing Cyber Security practice as a Service Delivery Manager, responsible for the day-to-day delivery... governance, automate access management and strengthen cyber resilience. You'll collaborate with technical specialists, architects
Senior Consultant / Assistant Manager - Risk Advisory Services (Cyber GRC)
BDO ¡ Posted 13 days ago
About the role
/Implementor) Experience in Cyber Security Governance Risk and Compliance including framework reviews Experiencing in assessing... mitigation, risk strategies and crisis management. Our Cyber GRC function helps organisations strengthen governance, manage
Senior Cyber Security Presales Consultant
SoftwareOne ¡ Posted 14 days ago
About the role
| Reports to: Cyber Security Presales Lead ANZ | Visa Requirements: Valid working rights for Australia | Language Requirements... while expanding your expertise across leading security vendors? Practical Information: Location: Melbourne or Sydney, Australia
Head of Cyber Security
Intellihub ¡ Posted 15 days ago
About the role
energy â bring yours. Job Description We're looking for a practical and people-focused cyber security leader to lead... our cyber security function. As the Head of Cyber Security, you'll be responsible for leading the day-to-day cyber security
Cyber Security Analyst / Assessor
Hays ¡ Posted 19 days ago
About the role
at strengthening cyber security capabilities across a large and complex environment. They are investing heavily in secure digital...-tenant cloud environments. Understanding of Generative AI architectures and associated cyber security risks. Experience
Associate Consultant - Cyber Security
SoftwareOne ¡ Posted 37 days ago
About the role
compensation or recruiter fee. The role Associate Consultant - Cyber Security Passionate about cyber security and interested... an Associate Consultant - Cyber Security to support the protection and security of cloud environments across AWS and Azure. Working
Cyber Security Analyst
Specialized Bicycle Components ¡ Posted 45 days ago
About the role
Cyber Security Analyst About the Role The Cyber Security Analyst helps protect Specialized by monitoring security... teams use security tooling effectively. The ideal candidate is curious, organized, comfortable investigating technical
Cyber Security Consultant - GRC
Teamified ¡ Posted 46 days ago
About the role
solutions that support the achievement of their own strategic objectives. Job Summary: The Cyber Security Consultant... supports the delivery of cyber security and risk engagements, performing assessments, documentation, and analysis activities
EL1 Lead Cyber Operations Security Expert
Softtestpays ¡ Posted 64 days ago
About the role
Australian Citizens residing in Australia only respond. Job details Role/s: 1 x EL1 Cyber Operations Security... Expert The Cyber Operations Security Expert, will undertake technical cyber security activities under the leadership of the
Cyber Security Engineer/Technical Professional
Aris Zinc Group ¡ Posted today
About the role
Job Title - Cyber Security Engineer/Technical Professional Job Id 1268174 Security Clearance: NV1 Clearance Length of Contract: 4 months The role closes on 17/11/2026 Location: Melbourne, VIC About the Role: We are seeking a Cyber Security Engineer or Technical Professional to execute security accreditation, assurance, and compliance activities in support of CA33 - Command Support Systems. The primary focus of this role is to maintain and support the security of CA33 capabilities throughout their lifecycle, ensuring compliance and cyber security requirements. Working within the CA33 Cyber and Security team, the successful candidate will collaborate with engineering, software development, and sustainment personnel to assess security risks, develop and maintain accreditation documentation, and support Authority to Operate (ATO) activities. Key Responsibilities: Security Accreditation and Assurance Execute and coordinate security accreditation activities for CA33 Command Support Systems. Develop, maintain, and update security accreditation artefacts and supporting documentation. Conduct security risk assessments and document identified risks, treatments, and residual risk outcomes. Prepare security assurance evidence and documentation to support accreditation and ATO outcomes. Liaise with DCIAB and relevant stakeholders to support accreditation and assurance activities. Apply and support compliance with the ISM, security policies, DISP requirements, ISO 27001, and NIST guidance. Work with stakeholders to support accreditation outcomes and security compliance activities. Review security-related changes and provide advice regarding impacts to accreditation status and security posture. Provide cyber security advice, recommendations, and guidance to engineering and technical personnel as required. Contribute to vulnerability remediation, security control implementation, and system hardening activities. Key Relationships: CA33 Engineering and Sustainment personnel Software Development teams supporting CA33 capabilities. Cyber and Information Assurance Branch (DCIAB). Army (LC4ISREW) and Joint Security stakeholders. JSD LC4SB Cyber and Security representatives Essential Experience: Experience undertaking security accreditation, cyber security assurance, or system authorisation activities Experience conducting cyber security risk assessments and supporting ATO processes. Working knowledge of the ISM and cyber security requirements. Experience producing security accreditation documentation, risk assessments, and assurance reports. Strong written and verbal communication skills. Understanding of systems engineering principles and the SDLC. Desirable Experience: Experience applying the CSAAF. Familiarity with ICT environments, command support systems, or mission systems. Knowledge of vulnerability management, system hardening, and security control implementation. Experience with ISO 27001, NIST, DISP, and security governance frameworks. SFIA Skills Sought: The selection, design, justification, implementation and operation of controls and management strategies to maintain the security, confidentiality, integrity, availability, accountability and relevant compliance of information systems with legislation, regulation and relevant standards. SCTY Level 3: Communicates information security risks and issues to business managers and others. Performs basic risk assessments for small information systems. Contributes to vulnerability assessments. Applies and maintains specific security controls as required by organisational policy and local risk assessments. Investigates suspected attacks. Responds to security breaches in line with security policy and records the incidents and action taken. Please contact [email protected] or simply click apply to submit your application "We warmly welcome applications from individuals of all backgrounds, including First Nations Australians, Australian Defence Force and First Responder veterans, women in STEM, and people of all abilities, including those registered with the NDIS."
Cyber Security Operations Coordinator, Strategy, Delivery and Cybersecurity / Cybersecurity Operations
Victorian Government ¡ Posted today
About the role
About the role: The Cyber Security Operations Coordinator will support the Manager, Cyber Security Operations in coordinating and delivering day-to-day cyber security operational services across the department. The role will assist with the coordination of security monitoring, incident response, vulnerability management, endpoint protection, privileged access, security tooling, operational reporting and stakeholder engagement activities to help protect departmental information, systems and services. Working closely with internal teams, service providers and business stakeholders, the position will contribute to effective cyber security operations, timely resolution of security risks and incidents, and continuous improvement of operational security processes in line with departmental policies, Victorian Government requirements and recognised cyber security best practice. About us: At the Victorian Department of Health we want a future where Victorians are the healthiest people in the world. A Victoria where our children and people thrive, our workplaces are productive and safe, and our communities are more connected. We see it as our job to support Victorians to stay healthy and safe. And to deliver a world-class healthcare system that ensures every single Victorian can access safe, quality care that leads to better health outcomes for all. About you: Main Accountabilities Include - * Coordinate day-to-day cyber security operations activities, including security monitoring, incident triage, vulnerability management, endpoint protection, privileged access support and operational security reporting. * Support the coordination of cyber security incidents by assisting with assessment, escalation, stakeholder communication, evidence capture, remediation tracking and post-incident improvement activities. * Assist with vulnerability, threat and risk management activities by coordinating inputs from security tools, service providers and technical teams, and tracking agreed treatment actions to closure. * Maintain operational security processes, registers, evidence and reporting artefacts to support cyber assurance, audit, compliance and management reporting obligations. * Coordinate operational engagement with internal teams, managed service providers and business stakeholders to support timely resolution of cyber security issues and service requests. Qualification(s) The following qualifications would be well regarded: * A relevant tertiary qualification in information technology, cyber security, information systems, risk management or a related discipline. * Experience working in cyber security operations, ICT operations, service management, risk, compliance or an information security support role. * Industry recognised cyber security, cloud, service management or risk certifications and training would be highly regarded, such as Security, Microsoft security certifications, ITIL, CISSP Associate or equivalent. Specialist Expertise: * Demonstrated knowledge of cyber security operations practices, including incident coordination, vulnerability management, endpoint security, identity and access controls, security monitoring and operational reporting. * Ability to interpret security alerts, incidents, vulnerabilities, risks and control information and translate this into clear actions, reporting and stakeholder communications. * Experience working with or supporting cyber security tools and services such as SIEM/SOC platforms, endpoint protection, vulnerability management, identity and access management, cloud security and ticketing/workflow systems. What we offer: * The opportunity to perform meaningful work, making direct contributions toward enabling Victorians to be the healthiest people in the world. * A wide range of growth and development opportunities within the department and wider Victorian Public Service. * A strong commitment to work-life balance, including a diverse array of flexible working arrangements. How to apply: Applications should include a resume and a cover letter. Click the âApply' button to view further information about the role including key contact details and the advertisement closing date. We are committed to developing and supporting a workforce that is well equipped and highly motivated to provide responsive and quality services to all Victorians. We continue to build an inclusive workplace that embraces diversity of backgrounds and differences to realise the potential of our employees for innovation and delivering services aimed at enhancing the lives of all Victorians. All roles can be worked flexibly and we encourage applications from Aboriginal people, people with disability, LGBTIQ and people from culturally diverse backgrounds. Please contact us if you require any adjustments to participate in the recruitment process at [email protected]. For more information on our commitment to inclusion and diversity see inclusion and diversity at the Department of Health. If you have any queries in relation to participation in recruitment processes at Health, or experience any issues in applying, please feel free to email [email protected]. Please note that unsolicited applications from third parties cannot be accepted. If you have questions regarding the role, please message the contact person listed on the advertisement directly. Preferred applicants may be required to complete a police check and other pre-employment checks. Information provided will be treated in line with our Privacy Policy.
Cyber Security Operations Coordinator, Strategy, Delivery and Cybersecurity / Cybersecurity Operations
Department of Health ¡ Posted today
About the role
The Department of Health plays a critical role in the Victorian health system and is responsible for shaping it to meet the health needs of all Victorians. We're focused on supporting Victorians to be as healthy as they can; whether through alerting them to seasonal risks like thunderstorm asthma, notifying them of contact with communicable diseases, safeguarding their drinking water, developing the best health, wellbeing and care facilities in the world, being at the forefront of mental health and wellbeing treatment or accelerating medical research. It's all part of the way we partner with the community to help every individual lead a healthy life. About the role: The Cyber Security Operations Coordinator will support the Manager, Cyber Security Operations in coordinating and delivering day-to-day cyber security operational services across the department. The role will assist with the coordination of security monitoring, incident response, vulnerability management, endpoint protection, privileged access, security tooling, operational reporting and stakeholder engagement activities to help protect departmental information, systems and services. Working closely with internal teams, service providers and business stakeholders, the position will contribute to effective cyber security operations, timely resolution of security risks and incidents, and continuous improvement of operational security processes in line with departmental policies, Victorian Government requirements and recognised cyber security best practice. About us: At the Victorian Department of Health we want a future where Victorians are the healthiest people in the world. A Victoria where our children and people thrive, our workplaces are productive and safe, and our communities are more connected. We see it as our job to support Victorians to stay healthy and safe. And to deliver a world-class healthcare system that ensures every single Victorian can access safe, quality care that leads to better health outcomes for all. About you: Main Accountabilities Include - Coordinate day-to-day cyber security operations activities, including security monitoring, incident triage, vulnerability management, endpoint protection, privileged access support and operational security reporting. Support the coordination of cyber security incidents by assisting with assessment, escalation, stakeholder communication, evidence capture, remediation tracking and post-incident improvement activities. Assist with vulnerability, threat and risk management activities by coordinating inputs from security tools, service providers and technical teams, and tracking agreed treatment actions to closure. Maintain operational security processes, registers, evidence and reporting artefacts to support cyber assurance, audit, compliance and management reporting obligations. Coordinate operational engagement with internal teams, managed service providers and business stakeholders to support timely resolution of cyber security issues and service requests. Qualification(s) The following qualifications would be well regarded: A relevant tertiary qualification in information technology, cyber security, information systems, risk management or a related discipline. Experience working in cyber security operations, ICT operations, service management, risk, compliance or an information security support role. Industry recognised cyber security, cloud, service management or risk certifications and training would be highly regarded, such as Security, Microsoft security certifications, ITIL, CISSP Associate or equivalent. Specialist Expertise: Demonstrated knowledge of cyber security operations practices, including incident coordination, vulnerability management, endpoint security, identity and access controls, security monitoring and operational reporting. Ability to interpret security alerts, incidents, vulnerabilities, risks and control information and translate this into clear actions, reporting and stakeholder communications. Experience working with or supporting cyber security tools and services such as SIEM/SOC platforms, endpoint protection, vulnerability management, identity and access management, clo ud security and ticketing/workflow systems. What we offer: The opportunity to perform meaningful work, making direct contributions toward enabling Victorians to be the healthiest people in the world. A wide range of growth and development opportunities within the department and wider Victorian Public Service. A strong commitment to work-life balance, including a diverse array of flexible working arrangements. How to apply: Applications should include a resume and a cover letter. Click the âApply' button to view further information about the role including key contact details and the advertisement closing date. We are committed to developing and supporting a workforce that is well equipped and highly motivated to provide responsive and quality services to all Victorians. We continue to build an inclusive workplace that embraces diversity of backgrounds and differences to realise the potential of our employees for innovation and delivering services aimed at enhancing the lives of all Victorians. All roles can be worked flexibly and we encourage applications from Aboriginal people, people with disability, LGBTIQ and people from culturally diverse backgrounds. Please contact us if you require any adjustments to participate in the recruitment process at [email protected] . For more information on our commitment to inclusion and diversity see inclusion and diversity at the Department of Health . If you have any queries in relation to participation in recruitment processes at Health, or experience any issues in applying, please feel free to email [email protected] . Please note that unsolicited applications from third parties cannot be accepted. If you have questions regarding the role, please message the contact person listed on the advertisement directly. Preferred applicants may be required to complete a police check and other pre-employment checks. Information provided will be treated in line with our .
SOC Analyst (Level 1, 2 & 3) - MSSP - Leading Cyber Security Provider!
Saul Recruitment ¡ Posted today
About the role
Saul Recruitment - Specialising in recruiting top Cyber Security talent across Oz & NZ! Looking for a role where you can build your cyber security career, work alongside experienced professionals and help protect organisations from real-world threats? $90k - $180k Super Training (Salary dependent on experience) Melbourne | Hybrid WFH | 24/7 SOC | Ongoing Training & Career Growth This is an outstanding opportunity to join one of Australia's fastest-growing cyber security providers. You'll be part of a high-performing Security Operations Centre, working with enterprise clients across multiple industries and using leading security technologies every day. Whether you're an experienced Level 3 Analyst or looking to step into your first SOC role, there are opportunities available across all levels. Why This Company Stands Out: Real career progression: Clear pathways from Level 1 through to Senior Analyst, Threat Hunter, Incident Response and Security Engineering. Excellent training: Industry certifications, mentoring and continuous technical development. Modern security stack: Work across leading SIEM, EDR, SOAR and threat intelligence platforms. Supportive leadership: Leaders who invest in their team and promote from within. Hybrid flexibility: Balance your time between home and the office. Collaborative culture: Learn from experienced cyber professionals who genuinely enjoy sharing knowledge. You'll be joining a business that's investing heavily in cyber security and building one of the strongest SOC teams in Australia. What You'll Be Doing: Monitoring security events across multiple client environments Investigating alerts and identifying genuine security incidents Responding to cyber security incidents and coordinating remediation activities Performing threat hunting and proactive security monitoring (Level 2 & 3) Conducting malware analysis and forensic investigations (Level 3) Escalating incidents where appropriate Working closely with clients during security events Developing and improving SOC processes and documentation Contributing to security automation initiatives Keeping up to date with the latest cyber threats and attack techniques What You'll Bring: Experience working in a Security Operations Centre (Level dependent) Strong analytical and problem-solving skills Knowledge of cyber security frameworks and best practices Experience investigating security alerts and incidents Excellent communication skills A genuine passion for cyber security Relevant certifications are highly regarded (Security, CySA, SC-200, GCIA, GCIH, CISSP or similar) Experience Across a Mix of: Microsoft Sentinel Microsoft Defender XDR CrowdStrike Splunk Microsoft Defender for Endpoint Microsoft 365 Security Azure AWS SIEM & SOAR EDR/XDR Threat Intelligence Incident Response Vulnerability Management Identity & Access Management Networking and Firewalls What's In It For You? Join a growing cyber security organisation Work with enterprise environments and modern technologies Excellent training and certification support Genuine career progression opportunities Hybrid working flexibility Supportive team culture Competitive salary and benefits This is a fantastic opportunity to develop your cyber security career with a business that's committed to investing in its people. Referral Bonus! Know someone who would be perfect? Refer them and receive $2,000 if they're successfully placed!
Digital Forensics & Incident Response Senior Analyst
Telstra ¡ Posted today
About the role
Employment Type Permanent Closing Date 16 Nov 2026 11:59pm Job Title Digital Forensics & Incident Response Senior Analyst Job Summary Job Description The Opportunity An exciting opportunity is available for an experienced Digital Forensics & Incident Response Senior Analyst to join Telstraâs Cyber Emergency Response Team. Youâll operate on the front line of Telstraâs cyber defence, investigating and responding to complex security incidents across our technology and network environments. Using contemporary forensic, incident response and analytical capabilities, youâll help identify, contain and respond to threats including malicious code, unauthorised access, information disclosure and system compromise. This role offers the opportunity to work on complex cyber challenges while helping strengthen Telstraâs overall security posture. What Youâll Do Coordinate and support the response to complex cyber security incidents in a timely and effective manner. Conduct digital forensic, host, network and log analysis to identify indicators of compromise and determine incident scope. Gather, preserve and report digital evidence accurately, ensuring appropriate evidentiary standards are maintained. Identify security gaps and recommend appropriate controls and remediation actions. Partner with security, technology and business teams to strengthen cyber resilience. Contribute to the development and maintenance of incident response plans, playbooks and processes. Document and share technical knowledge and lessons learned across the team. Maintain strong networks across the cyber security and incident response community. Participate in the teamâs on-call roster to support critical security incidents. About You Youâll bring strong technical capability in cyber incident response and digital forensics, combined with the judgement and communication skills to navigate complex incidents and engage effectively with stakeholders. Ideally, youâll have: Proven experience in cyber security incident response and digital forensics, including complex incident handling. Strong host, network and log analysis capabilities. Experience using contemporary incident response and forensic tools. Strong knowledge of Linux and command-line environments. Experience identifying and analysing indicators of compromise. Understanding of attack techniques, social engineering and contemporary cyber threats. Strong stakeholder engagement skills, with the ability to communicate technical findings and influence appropriate responses. Experience in coding, web development or malware analysis is highly desirable. The ability to work effectively during high-priority or time-critical cyber incidents.
Senior Test Engineer (Security)
Calleo ¡ Posted 1 days ago
About the role
Job description Federal Government client is looking to engage the services of a Senior Test Engineer with experience and knowledge in Cyber Security environments and projects. Key duties and responsibilities Create and execute complex test cases on appropriate testing platforms using own in-depth technical analysis of specifications. Create complex test data within external software vendor environment. Review test cases from team members to ensure quality. Develop and review test plans, test cases, task cards and supporting test data, working to the specifications provided. Apply in-depth technical analysis, practices and procedures when designing, executing and creating test cases. Assist with defining requirements for the test environments. Key knowledge and experience. Protective Security Policy Framework (PSPF) Information Security Manual (ISM) Essential 8 Strategies National Institute of Standards and Technology (NIST) Demonstrated experience in cyber resilience, security remediation or compliance initiatives within large and complex ICT environments, preferably within Australian Government environments. Demonstrated experience applying cyber security frameworks, policies and standards, including the Protective Security Policy Framework (PSPF), Information Security Manual (ISM), Essential Eight and other relevant security and risk management frameworks. Demonstrated ability to engage, influence and collaborate with a broad range of stakeholders, internal business representatives and external providers. What's on Offer: Long term contract with extension options Federal Government Contract Large scale Testing program Due to the nature of the role, candidates must be Australian Citizens with Federal government clearances. How to Apply: If interested, please apply through the links provided. Calleo is an equal opportunity employer and we encourage applications from all people including Aboriginal and Torres Strait Islander peoples. Follow Calleo on LinkedIn and visit our website to keep up to date on all our current job vacancies: www.linkedin.com/company/calleoresourcing www.calleo.com.au
Security Engineer
Tech & Data People ¡ Posted 4 days ago
About the role
We are seeking a skilled and proactive Cyber Security Engineer to join a large-scale cyber transformation program focused on strengthening and modernising enterprise security capabilities. About the Role As a Cyber Security Engineer, you will play a key role in delivering security engineering initiatives across enterprise and cloud environments. You will be responsible for implementing and optimising security technologies, enhancing monitoring capabilities, and supporting the ongoing uplift of cyber security practices. Key Responsibilities Engineer, configure, and maintain security technologies across enterprise and cloud environments. Enhance SIEM, EDR, and security monitoring platforms to improve threat detection and response capabilities. Develop detection rules, dashboards, and automated response mechanisms to operationalise threat intelligence. Conduct vulnerability assessments, analyse findings, and work with technology teams to drive remediation activities. Implement and maintain secure cloud configurations across Azure and AWS environments. Support security architecture, monitoring, access controls, and data protection initiatives. Contribute to incident response activities, investigations, and security hardening programs. Collaborate with technical and business stakeholders to improve overall cyber security maturity. About You: Experience in Cyber Security Engineering , Security Operations , or a related cyber security discipline. Strong understanding of networking, operating systems, and core cyber security principles. Hands-on experience with: SIEM platforms Endpoint Detection & Response (EDR) solutions Firewalls Vulnerability Management tools Cloud-native security technologies Knowledge of cloud security practices across Microsoft Azure and/or AWS . Experience supporting cyber security incident investigation, response, and remediation. Strong stakeholder engagement and communication skills. Ability to work collaboratively across both technical and non-technical teams. Highly Regarded Experience working with or knowledge of: ISO 27001 NIST Cyber Security Framework (NIST CSF) ASD Essential Eight Security monitoring and threat detection engineering Vulnerability management and remediation programs Security automation and orchestration Critical infrastructure, enterprise, or highly regulated environments What's on Offer? Permanent opportunity within a growing cyber security function. Hybrid and flexible working arrangements. Exposure to enterprise-scale cyber security transformation initiatives. Opportunity to work across modern cloud and infrastructure environments. Collaborative and supportive team culture. Ongoing professional development and career growth opportunities. The chance to make a meaningful impact in strengthening organisational cyber resilience.
Senior Cyber Security Engineer - Contract - Melbourne, Adelaide
Hastha Solutions ¡ Posted 5 days ago
About the role
Urgent requirement of Senior Cyber Security Engineer - Contract - Melbourne, Adelaide Requirements â Business Enablement ¡ Deliver cyber engineering services that protect business operations and align with risk appetite, safety requirements, and regulatory obligations. ¡ Partner with Operations, IT, Networks, Projects, and Engineering to ensure controls are practical, sustainable, and enable reliable system performance. ¡ Translate regulatory, CI Act, and AESCSF requirements into actionable engineering activities. ¡ Provide expert, influential advice on complex security issues, including OT/IT convergence, vendor access, remote support, and safety-critical industrial environments. Cyber Security Engineering ¡ Design, implement, and support security controls across IT, OT, AI and IoT systems. ¡ Deploy and manage technologies such as firewalls, SASE/SSE, EDR/XDR, SIEM/SOAR, IAM, encryption, and industrial security platforms. ¡ Implement secure network segmentation across OT environments, including DMZs, Zone/Conduit models, and vendor remote access models. ¡ Embed DevSecOps practices into CI/CD pipelines, including SCA, SAST/DAST, secrets management, and build pipeline hardening. ¡ Use automation (IaC, policy-as-code, configuration compliance tools) to maintain secure baselines. ¡ Oversee delivery of secure engineering outcomes for projects, maintenance activities, and system upgrades. Risk Management & Compliance ¡ Perform risk assessments, threat modelling, vulnerability analysis, and configuration compliance reviews. ¡ Support uplift of AESCSF maturity and compliance with ISA/IEC 62443, NIST CSF, ASD Essential 8, and CI Act obligations. ¡ Identify control gaps and work with Technology and Engineering teams to implement mitigations. ¡ Maintain documentation, standards, patterns, and OT system security baselines. Incident Response & Resilience ¡ Participate in the Cyber Security Incident Response Team (CSIRT) as an Incident Handler. ¡ Support IR activities across IT and OT environments, including containment, forensics and recovery. ¡ Maintain IR playbooks and contribute to tabletop and purple-team exercises. ¡ Provide out-of-hours support for critical cyber or operational incidents. Threat Intelligence Integration ¡ Integrate internal and external threat intelligence into engineering, monitoring, and IR processes. ¡ Track OT/ICS threat trends (e.g., ransomware targeting manufacturing, ICS-specific malware). ¡ Use TI insights to shape architecture decisions, vulnerability management and control prioritisation. Architecture Support ¡ Contribute to development of cyber security architecture patterns for IT, OT, IoT, and Cloud. ¡ Support design reviews and key design decision processes. ¡ Ensure engineering solutions align with enterprise architecture and secure-by-design principles. Continuous Improvement ¡ Identify automation opportunities and improve efficiency of control implementation, monitoring and incident response. ¡ Stay current with evolving threats, emerging technologies, and best practices in ICS and enterprise cyber security. ¡ Drive uplift of cyber engineering processes, runbooks, standards, and asset security practices. ¡ Contribute to the Cyber Safety Program and broader security uplift initiatives. ¡ Bachelorâs degree in cyber security, IT, engineering or related field. ¡ Industry certification (e.g., CISSP or equivalent). ¡ Minimum 6 yearsâ experience in cyber security engineering roles across IT and/or OT environments. ¡ Demonstrated experience with AESCSF, ISA/IEC 62443, ASD Essential 8 or NIST frameworks. ¡ Hands-on experience working within OT/ICS environments (SCADA, DCS, PLCs, industrial networks, safety systems). ¡ Experience delivering security outcomes across distributed industrial sites or critical infrastructure. Technical Skills ¡ Excellent knowledge of cyber security principles, management frameworks, and practices, particularly relating to OT. ¡ Experience with application whitelisting, SASE, firewalls, proxy, email filtering, anti-malware, DLP, cloud platforms, and other security technologies. ¡ Familiarity with DevSecOps, automation, and orchestration tools. ¡ Familiarity and experience with Data protection and classification ¡ Experience with vulnerability management/scanning, web application security, API security, Zero Trust, PAM, NDR, UEBA, and network-based encryption. ¡ Proficiency with Microsoft (Azure, O365), Linux (Red Hat), and mobile platforms (iPhone & Android). Soft Skills ¡ Strong communication and stakeholder engagement skills. ¡ Excellent analytical and organizational skills. ¡ Ability to identify, assess, and communicate cyber security risks. Leadership ¡ Experience providing thought leadership or mentoring within a cyber security context Duration: 06 Months and possible extension Eligibility: Australian/NZ Citizens/PR Holders only Email: [email protected] â
Senior Cyber Security Engineer - Contract - Melbourne, Adelaide
Hastha Solutions ¡ Posted 6 days ago
About the role
Urgent requirement of Senior Cyber Security Engineer - Contract - Melbourne, Adelaide Requirements Business Enablement ¡ Deliver cyber engineering services that protect business operations and align with risk appetite, safety requirements, and regulatory obligations. ¡ Partner with Operations, IT, Networks, Projects, and Engineering to ensure controls are practical, sustainable, and enable reliable system performance. ¡ Translate regulatory, CI Act, and AESCSF requirements into actionable engineering activities. ¡ Provide expert, influential advice on complex security issues, including OT/IT convergence, vendor access, remote support, and safety-critical industrial environments. Cyber Security Engineering ¡ Design, implement, and support security controls across IT, OT, AI and IoT systems. ¡ Deploy and manage technologies such as firewalls, SASE/SSE, EDR/XDR, SIEM/SOAR, IAM, encryption, and industrial security platforms. ¡ Implement secure network segmentation across OT environments, including DMZs, Zone/Conduit models, and vendor remote access models. ¡ Embed DevSecOps practices into CI/CD pipelines, including SCA, SAST/DAST, secrets management, and build pipeline hardening. ¡ Use automation (IaC, policy-as-code, configuration compliance tools) to maintain secure baselines. ¡ Oversee delivery of secure engineering outcomes for projects, maintenance activities, and system upgrades. Risk Management & Compliance ¡ Perform risk assessments, threat modelling, vulnerability analysis, and configuration compliance reviews. ¡ Support uplift of AESCSF maturity and compliance with ISA/IEC 62443, NIST CSF, ASD Essential 8, and CI Act obligations. ¡ Identify control gaps and work with Technology and Engineering teams to implement mitigations. ¡ Maintain documentation, standards, patterns, and OT system security baselines. Incident Response & Resilience ¡ Participate in the Cyber Security Incident Response Team (CSIRT) as an Incident Handler. ¡ Support IR activities across IT and OT environments, including containment, forensics and recovery. ¡ Maintain IR playbooks and contribute to tabletop and purple-team exercises. ¡ Provide out-of-hours support for critical cyber or operational incidents. Threat Intelligence Integration ¡ Integrate internal and external threat intelligence into engineering, monitoring, and IR processes. ¡ Track OT/ICS threat trends (e.g., ransomware targeting manufacturing, ICS-specific malware). ¡ Use TI insights to shape architecture decisions, vulnerability management and control prioritisation. Architecture Support ¡ Contribute to development of cyber security architecture patterns for IT, OT, IoT, and Cloud. ¡ Support design reviews and key design decision processes. ¡ Ensure engineering solutions align with enterprise architecture and secure-by-design principles. Continuous Improvement ¡ Identify automation opportunities and improve efficiency of control implementation, monitoring and incident response. ¡ Stay current with evolving threats, emerging technologies, and best practices in ICS and enterprise cyber security. ¡ Drive uplift of cyber engineering processes, runbooks, standards, and asset security practices. ¡ Contribute to the Cyber Safety Program and broader security uplift initiatives. ¡ Bachelorâs degree in cyber security, IT, engineering or related field. ¡ Industry certification (e.g., CISSP or equivalent). ¡ Minimum 6 yearsâ experience in cyber security engineering roles across IT and/or OT environments. ¡ Demonstrated experience with AESCSF, ISA/IEC 62443, ASD Essential 8 or NIST frameworks. ¡ Hands-on experience working within OT/ICS environments (SCADA, DCS, PLCs, industrial networks, safety systems). ¡ Experience delivering security outcomes across distributed industrial sites or critical infrastructure. Technical Skills ¡ Excellent knowledge of cyber security principles, management frameworks, and practices, particularly relating to OT. ¡ Experience with application whitelisting, SASE, firewalls, proxy, email filtering, anti-malware, DLP, cloud platforms, and other security technologies. ¡ Familiarity with DevSecOps, automation, and orchestration tools. ¡ Familiarity and experience with Data protection and classification ¡ Experience with vulnerability management/scanning, web application security, API security, Zero Trust, PAM, NDR, UEBA, and network-based encryption. ¡ Proficiency with Microsoft (Azure, O365), Linux (Red Hat), and mobile platforms (iPhone & Android). Soft Skills ¡ Strong communication and stakeholder engagement skills. ¡ Excellent analytical and organizational skills. ¡ Ability to identify, assess, and communicate cyber security risks. Leadership ¡ Experience providing thought leadership or mentoring within a cyber security context Duration: 06 Months and possible extension Eligibility: Australian/NZ Citizens/PR Holders only Email: [email protected]
Senior Business Analyst
Centorrino Technologies ¡ Posted 6 days ago
About the role
Description At Centorrino Technologies (CT), weâre more than just techâweâre a community that goes beyond expectations. Weâve been recognised as a Great Place to Work in 2024 and one of the Best Places to Work Medium Size in Australia for 2024, with an outstanding eNPS score of 68. And weâre not stopping there. We're on a mission to redefine the customer experience, and we need a driven Strategy Consultant to join our team. We are seeking an experienced Senior Business Analyst to join an Agile, multidisciplinary team delivering cyber security, resilience and remediation initiatives across a large and complex ICT environment. This role will play a key part in strengthening cyber security posture, supporting security compliance and driving improvements across business processes, technology and operational capabilities. Working with technical specialists, business stakeholders and senior executives, you will lead business analysis activities, translate complex requirements into practical solutions and support the successful delivery of strategic cyber security initiatives. This is an initial 12-month contract commencing 1 February 2027, with a hybrid working arrangements based across QLD, ACT, VIC, NSW or SA. Requirements What You'll Do Lead and coordinate complex business analysis and requirements elicitation activities across cyber security and ICT initiatives. Engage with stakeholders to understand business needs, identify process improvements, resolve competing priorities and define clear requirements. Develop and maintain key business analysis artefacts, including As-Is and To-Be process models, detailed user stories, use cases, integration data flow diagrams and test cases. Support cyber resilience, security remediation, compliance and risk management initiatives across enterprise ICT environments. Analyse business processes, systems and operational challenges to identify improvement opportunities and recommend fit-for-purpose solutions. Manage requirements traceability, scope changes, dependencies, risks and stakeholder expectations throughout the project lifecycle. Collaborate with Agile delivery teams through two-week sprint cycles, supporting solution design, prioritisation, testing and implementation. Work closely with cyber security and technical teams to assess vulnerabilities, remediation activities, security controls and compliance requirements. Coordinate quality assurance, verification and validation activities, ensuring delivered solutions meet business and technical requirements. Communicate complex technical concepts and analysis outcomes to both technical and non-technical stakeholders. What You'll Bring Demonstrated experience as a Business Analyst or Senior Business Analyst delivering cyber security, cyber resilience, security remediation or compliance initiatives within large and complex ICT environments. Strong knowledge and practical application of cyber security frameworks, policies and standards, including: Protective Security Policy Framework (PSPF). Australian Government Information Security Manual (ISM). Essential Eight Strategies. National Institute of Standards and Technology (NIST) frameworks. Proven experience in business process modelling, requirements definition and management, stakeholder relationship management and business process improvement. Experience developing business analysis deliverables, including process models, user stories, use cases, data flow diagrams and test cases. Exposure to enterprise cyber security and vulnerability management technologies such as Archer IRM, Rapid7, Tenable, Microsoft Defender, Forescout and Sentinel. Strong stakeholder engagement, communication and influencing skills, with the ability to work effectively with senior executives, technical specialists, business representatives and external providers. Experience working within Agile delivery environments and managing competing priorities, complex dependencies and tight delivery timeframes. Strong analytical, problem-solving and risk management capabilities, with the ability to translate complex business and technical requirements into actionable outcomes. Experience working within government or other regulated environments, particularly across enterprise infrastructure, cloud, identity and access management, security operations and ICT transformation. A current Negative Vetting Level 1 (NV1) security clearance. Benefits Why You'll Love Working Here: Our company is more than just a workplace, it's a hub of inspiration and creativity where employees love to work! Here's why: Hybrid working (for majority of our roles) with team anchor days to support collaboration. Extensive training and development opportunities that enable continual growth as part of your career planning. Extensive discounts and benefits to maximise your money. A choice of your IT equipment to maximise your success and access to cost-price tech for your personal needs. Fun team events to celebrate achievements and connect with colleagues outside work as part of our engaging culture. CT celebrates diversity and enables every voice to be heard as we drive to create the world we want. Apply today and be part of a team that values innovation, inclusivity, variety and diverse backgrounds. Note: A valid Vulnerable People / Working with Children Check (WWCC) and Police Check are required.
Manager - OT Cyber Security
Consolidated Power Projects ¡ Posted 7 days ago
About the role
Job Description This is a brand-new position, created to give CPP a clearly named Manager - OT Cyber Security lead across all customer project delivery. You'll build and maintain an executive-endorsed OT cyber security management program, and embed secure-by-design principles across the full project lifecycle â from tendering through design, procurement, construction, commissioning and handover. You'll work closely with our engineering teams, executives, legal, procurement and bid staff, design and project managers, commissioning and construction staff, customers and their cyber leads, and suppliers and subcontractors. This role is squarely focused on Operational Technology (OT) cyber security for projects delivered by CPP. Reporting to the Executive General Manager - Engineering, this is a high-autonomy, consultative role for someone who wants real ownership over how OT cyber security is done at CPP â with the credibility to influence both technical teams and senior stakeholders. This is a standalone specialist role with both strategic and hands-on responsibility. You will set the direction and personally develop the frameworks, policies, risk assessment methodologies and practical tools needed to embed cyber security throughout the project lifecycle. Key Responsibilities Act as CPP's OT cyber security Manager and primary point of contact for OT cyber security across project delivery. Establish and maintain OT cyber security governance, standards and project delivery processes aligned to IEC 62443 and AESCSF. Lead OT cyber risk assessments, project compliance documentation, supply-chain assurance and vendor evaluations. Interpret customer cyber security requirements and contractual obligations, and translate these into practical project deliverables. Develop OT cyber security architectures, standards and controls, including secure network design, zoning, segmentation and remote access, in collaboration with our SCADA engineering teams. Review factory and site acceptance testing to verify cyber security controls are implemented and compliant. Maintain audit-ready documentation, registers and evidence packs, and support incident response, patch management and change control processes. Provide practical guidance to executives, project teams and stakeholders on cyber security obligations, risks and requirements. Monitor emerging threats, industry developments and regulatory requirements relevant to CPP's role as an EPC contractor and service provider.
EL1 Lead Cyber Security Architect
Softtest pays pty ¡ Posted 7 days ago
About the role
Job Description: Australian Citizens residing in Australia only respond. Job details The EL2 Cyber Security Architect (Labour Hire) is accountable under broad direction to undertake work with a high level of complexity and/or sensitivity that delivers quality outcomes across the ICT support service functions of the National Disability Insurance Agency (NDIA). This position has a focus on Cyber Security across several capabilities including: identity and access. cyber security operations. data storage and analytics. payment and debt management. public facing systems where 3rd parties interact with the NDIA including API Gateway. fraud and case management. The EL2 Cyber Security Architect (Labour Hire) will work with one or more project teams and other SMEs to ensure that the cyber security architecture supports various programs of work and meets the business requirements of the Group. Key duties and responsibilities The position is an important, senior Architectural position within the NDIA. The EL2 Cyber Security Architect (Labour Hire) will provide cyber security architecture design and advice across one or more of the above-mentioned capabilities. They will: need to resolve complex IT related issues and risks across wide-ranging activities of substantial depth involving significant detail. have experience and in-depth knowledge across cyber security architecture and industry best practice: Designing, managing and implementing cyber-security best practices in line with the Agency's Cyber Security Team Liaising with various stakeholders from Senior Executives to Architects, Business Analysts, Project and Program Managers and Vendors to ensure program-wide visibility of cyber security issues, resolutions and remediations demonstrated skills and experience across all architecture domains (i.e. business, information, security, data, technology, integration, and application). develop and participate in the implementation of NDIA initiatives focused on the reduction of technology risk, governance and compliance to policies and regulatory compliance. develop IT security standards, policy, procedures, and controls for managing risks. support various business areas by ensuring stakeholders adequately address all relevant compliance standards such as the PSPF, ISM, Agency Risk Management Frameworks and incident management disciplines have demonstrated experience as a cyber security architect using both Microsoft and Amazon products and platforms. have a high level of communication skills, demonstrating an ability to communicate at the technical, business and personal levels along with excellent documentation skills have experience with digital transformations. initiate, establish and maintain strong relationships with a broad range of stakeholders. tertiary qualifications in an ICT related field or applicable industry certifications. (NOTE: the key responsibilities of the role are based on current priorities and may change over time) Required Skills: Project Teams Analysts Case Management Data API Support Information Security Access Incident Management Resolutions Architects Operations Compliance Regulatory Compliance Business Requirements Storage Architecture Insurance Analytics Risk Management Integration Communication Skills Vendors Security Documentation Design Business Communication Management
EL1 Lead Cyber Security Architect
Softtest pays pty ltd ¡ Posted 8 days ago
About the role
Australian Citizens residing in Australia only respond. Job details Role/s: 1 x EL2 Cyber Security Architect The EL2 Cyber Security Architect (Labour Hire) is accountable under broad direction to undertake work with a high level of complexity and/or sensitivity that delivers quality outcomes across the ICT support service functions of the National Disability Insurance Agency (NDIA). This position has a focus on Cyber Security across several capabilities including: identity and access. cyber security operations. data storage and analytics. payment and debt management. public facing systems where 3rd parties interact with the NDIA including API Gateway. fraud and case management. The EL2 Cyber Security Architect (Labour Hire) will work with one or more project teams and other SMEs to ensure that the cyber security architecture supports various programs of work and meets the business requirements of the Group. Key duties and responsibilities The position is an important, senior Architectural position within the NDIA. The EL2 Cyber Security Architect (Labour Hire) will provide cyber security architecture design and advice across one or more of the above-mentioned capabilities. They will: need to resolve complex IT related issues and risks across wide-ranging activities of substantial depth involving significant detail. have experience and in-depth knowledge across cyber security architecture and industry best practice: Designing, managing and implementing cyber-security best practices in line with the Agency's Cyber Security Team Liaising with various stakeholders from Senior Executives to Architects, Business Analysts, Project and Program Managers and Vendors to ensure program-wide visibility of cyber security issues, resolutions and remediations demonstrated skills and experience across all architecture domains (i.e. business, information, security, data, technology, integration, and application). develop and participate in the implementation of NDIA initiatives focused on the reduction of technology risk, governance and compliance to policies and regulatory compliance. develop IT security standards, policy, procedures, and controls for managing risks. support various business areas by ensuring stakeholders adequately address all relevant compliance standards such as the PSPF, ISM, Agency Risk Management Frameworks and incident management disciplines have demonstrated experience as a cyber security architect using both Microsoft and Amazon products and platforms. have a high level of communication skills, demonstrating an ability to communicate at the technical, business and personal levels along with excellent documentation skills have experience with digital transformations. initiate, establish and maintain strong relationships with a broad range of stakeholders. tertiary qualifications in an ICT related field or applicable industry certifications. (NOTE: the key responsibilities of the role are based on current priorities and may change over time)
Principal Cyber Security Pen Tester, Strategy, Delivery and Cybersecurity
Department of Health ¡ Posted 11 days ago
About the role
The Department of Health plays a critical role in the Victorian health system and is responsible for shaping it to meet the health needs of all Victorians. Weâre focused on supporting Victorians to be as healthy as they can; whether through alerting them to seasonal risks like thunderstorm asthma, notifying them of contact with communicable diseases, safeguarding their drinking water, developing the best health, wellbeing and care facilities in the world, being at the forefront of mental health and wellbeing treatment or accelerating medical research. Itâs all part of the way we partner with the community to help every individual lead a healthy life. About the role: The Principal Cyber Security â Penetration Testing role will be responsible for conducting penetration testing and vulnerability assessments, in collaboration with the Manager, Enterprise Cybersecurity Operations. The role will lead the development and management of penetration testing and vulnerability assessment activities, including the production of cyber security risk reports with findings and recommendations. The role will assist in the implementation of technical risk treatments, regularly review penetration testing tools and services, and update vulnerability configurations. This includes developing new vulnerability assessment schedules as required. The role will also support the implementation of security controls and coordinate their deployment across a range of predominantly cloud-based platforms and environments. Additionally, the role will be responsible for performing information security risk assessments, conducting gap analyses, and coordinating security remediation activities across the department. About us: At the Victorian Department of Health we want a future where Victorians are the healthiest people in the world. A Victoria where our children and people thrive, our workplaces are productive and safe, and our communities are more connected. We see it as our job to support Victorians to stay healthy and safe. And to deliver a world-class healthcare system that ensures every single Victorian can access safe, quality care that leads to better health outcomes for all. About you: Conduct penetration testing and vulnerability assessments in collaboration with the Manager, Enterprise Cybersecurity Operations. Lead the development and ongoing management of penetration testing and vulnerability assessment activities. Produce cyber security risk reports outlining findings and actionable recommendations from both pen-testing and vulnerability assessment. Assist in the implementation of technical risk treatments across systems and environments. Regularly review and assess the effectiveness of penetration testing tools and services. Qualification(s): A tertiary qualification relevant to ICT, Information Security, or similar would be highly advantageous. Specialist Expertise: Proven experience in penetration testing, ethical hacking, and vulnerability assessments across complex and cloud-based environments. Demonstrated experience in cyber security risk analysis and reporting, including development of mitigation recommendations. Proficiency with industry-standard penetration testing and vulnerability assessment tools (e.g., Burp Suite, Metasploit, Nessus, Nmap, Kali Linux). Strong understanding of cloud security (Microsoft Azure, AWS), secure coding practices, and system hardening techniques. Familiarity with regulatory standards and frameworks such as ISO 27001, NIST, OWASP Top 10, ASD ISM (Information Security Manual), and the Essential Eight. Experience coordinating remediation efforts and advising on technical risk treatments across multiple teams or departments. Additionally completed following certifications CEH â Certified Ethical Hacker and/or OSCP â Offensive Security Certified Professional What we offer: The opportunity to perform meaningful work, making direct contributions toward enabling Victorians to be the healthiest people in the world. A wide range of growth and development opportunities within the department and wider Victorian Public Service. A strong commitment to work-life balance, including a diverse array of flexible working arrangements. How to apply: Applications should include a resume and a cover letter. Click the âApply' button to view further information about the role including key contact details and the advertisement closing date. We are committed to developing and supporting a workforce that is well equipped and highly motivated to provide responsive and quality services to all Victorians. We continue to build an inclusive workplace that embraces diversity of backgrounds and differences to realise the potential of our employees for innovation and delivering services aimed at enhancing the lives of all Victorians. All roles can be worked flexibly and we encourage applications from Aboriginal people, people with disability, LGBTIQ and people from culturally diverse backgrounds. Please contact us if you require any adjustments to participate in the recruitment process at [email protected] . For more information on our commitment to inclusion and diversity see inclusion and diversity at the Department of Health . If you have any queries in relation to participation in recruitment processes at Health, or experience any issues in applying, please feel free to email [email protected] . Please note that unsolicited applications from third parties cannot be accepted. If you have questions regarding the role, please message the contact person listed on the advertisement directly. Preferred applicants may be required to complete a police check and other pre-employment checks. Information provided will be treated in line with our .
Principal Cyber Security Pen Tester, Strategy, Delivery and Cybersecurity
Victorian Government ¡ Posted 12 days ago
About the role
About the role: The Principal Cyber Security â Penetration Testing role will be responsible for conducting penetration testing and vulnerability assessments, in collaboration with the Manager, Enterprise Cybersecurity Operations. The role will lead the development and management of penetration testing and vulnerability assessment activities, including the production of cyber security risk reports with findings and recommendations. The role will assist in the implementation of technical risk treatments, regularly review penetration testing tools and services, and update vulnerability configurations. This includes developing new vulnerability assessment schedules as required. The role will also support the implementation of security controls and coordinate their deployment across a range of predominantly cloud-based platforms and environments. Additionally, the role will be responsible for performing information security risk assessments, conducting gap analyses, and coordinating security remediation activities across the department. About us: At the Victorian Department of Health we want a future where Victorians are the healthiest people in the world. A Victoria where our children and people thrive, our workplaces are productive and safe, and our communities are more connected. We see it as our job to support Victorians to stay healthy and safe. And to deliver a world-class healthcare system that ensures every single Victorian can access safe, quality care that leads to better health outcomes for all. About you: * Conduct penetration testing and vulnerability assessments in collaboration with the Manager, Enterprise Cybersecurity Operations. * Lead the development and ongoing management of penetration testing and vulnerability assessment activities. * Produce cyber security risk reports outlining findings and actionable recommendations from both pen-testing and vulnerability assessment. * Assist in the implementation of technical risk treatments across systems and environments. * Regularly review and assess the effectiveness of penetration testing tools and services. Qualification(s): A tertiary qualification relevant to ICT, Information Security, or similar would be highly advantageous. Specialist Expertise: * Proven experience in penetration testing, ethical hacking, and vulnerability assessments across complex and cloud-based environments. * Demonstrated experience in cyber security risk analysis and reporting, including development of mitigation recommendations. * Proficiency with industry-standard penetration testing and vulnerability assessment tools (e.g., Burp Suite, Metasploit, Nessus, Nmap, Kali Linux). * Strong understanding of cloud security (Microsoft Azure, AWS), secure coding practices, and system hardening techniques. * Familiarity with regulatory standards and frameworks such as ISO 27001, NIST, OWASP Top 10, ASD ISM (Information Security Manual), and the Essential Eight. * Experience coordinating remediation efforts and advising on technical risk treatments across multiple teams or departments. Additionally completed following certifications * CEH â Certified Ethical Hacker and/or * OSCP â Offensive Security Certified Professional What we offer: * The opportunity to perform meaningful work, making direct contributions toward enabling Victorians to be the healthiest people in the world. * A wide range of growth and development opportunities within the department and wider Victorian Public Service. * A strong commitment to work-life balance, including a diverse array of flexible working arrangements. How to apply: Applications should include a resume and a cover letter. Click the âApply' button to view further information about the role including key contact details and the advertisement closing date. We are committed to developing and supporting a workforce that is well equipped and highly motivated to provide responsive and quality services to all Victorians. We continue to build an inclusive workplace that embraces diversity of backgrounds and differences to realise the potential of our employees for innovation and delivering services aimed at enhancing the lives of all Victorians. All roles can be worked flexibly and we encourage applications from Aboriginal people, people with disability, LGBTIQ and people from culturally diverse backgrounds. Please contact us if you require any adjustments to participate in the recruitment process at [email protected]. For more information on our commitment to inclusion and diversity see inclusion and diversity at the Department of Health. If you have any queries in relation to participation in recruitment processes at Health, or experience any issues in applying, please feel free to email [email protected]. Please note that unsolicited applications from third parties cannot be accepted. If you have questions regarding the role, please message the contact person listed on the advertisement directly. Preferred applicants may be required to complete a police check and other pre-employment checks. Information provided will be treated in line with our Privacy Policy.
Head of Cyber Security
Intellihub ¡ Posted 15 days ago
About the role
Company Description Intellihub is committed to simplifying the energy transition â as a leader in smart metering across ANZ and innovator of solar, battery, EV, virtual power plant and home electrification solutions. With strong leadership supporting you, a career at Intellihub is defined by flexibility, growth and a deeply fulfilling experience. We're changing energy â bring yours. Job Description We're looking for a practical and people-focused cyber security leader to lead our cyber security function. As the Head of Cyber Security , you'll be responsible for leading the day-to-day cyber security function and executing Intellihub's cyber security strategy, roadmap and risk management program. Reporting to the CIO, this role provides operational leadership across security operations, governance, risk, compliance, security architecture and cyber resilience activities. Key Accountabilities Lead and deliver Intellihub's cyber security strategy, roadmap and governance framework, driving the ongoing maturity of cyber security capabilities across architecture, resilience and security operations. Identify, assess and mitigate cyber security risks across IT, IoT networks and third-party services. Provide security reporting, risk insights and recommendations to the CIO, Executive Team, customers and regulators. Drive cyber resilience, incident preparedness and recovery capabilities across the organisation. Provide security leadership across technology initiatives, embedding security-by-design principles from concept through to delivery. Oversee security assurance, third-party security risk and the effectiveness of cyber security controls. Act as a trusted cyber security advisor to business, technology and customer stakeholders, promoting security awareness and stakeholder engagement. Lead and develop a high-performing cyber security team, building capability across multiple security disciplines and fostering a culture of collaboration, accountability and continuous improvement. Provide effective oversight of cyber security investments, vendors and specialist partners to support the delivery of business and security outcomes. Qualifications This role would particularly suit someone who has led a small cyber security team or function, ideally within a critical infrastructure, energy, utilities or similarly regulated environment . You'll be comfortable balancing cyber security risk, operational requirements and business growth, while remaining resilient, adaptable and effective in a dynamic, evolving environment. Tertiary qualifications in Cyber Security, Information Technology, Computer Science or a related discipline. Proven experience leading a cyber security team within a lean or mid-sized organisation, with responsibility for guiding and overseeing a broad range of cyber security activities. Deep understanding of cyber security governance, regulatory obligations and security frameworks, including SOCI, CPS 234, ISO 27001, NIST and related industry standards. Knowledge of IoT, OT and cyber security risks associated with critical infrastructure environments. Strong understanding of cyber security operations, architecture, resilience, disaster recovery, assurance and risk management practices, including control effectiveness, audit requirements and recovery readiness. Experience engaging with regulators, government bodies and industry working groups on cyber security and critical infrastructure matters. Strong leadership, communication and stakeholder management skills, with the ability to influence decision-making, translate complex cyber security concepts into practical business outcomes, and successfully deliver initiatives in a complex environment. Proven ability to prioritise competing demands and allocate resources effectively across operational, regulatory and strategic initiatives. Experienced people leader with a passion for developing talent, building capability and creating high-performing teams. Additional Information This role can be based in either our Melbourne or Sydney office. Hybrid working arrangement with an expectation of three days per week in the office. Centrally located offices with easy access to public transport and amenities. Opportunity to lead and shape Intellihub's cyber security strategy within a critical infrastructure organisation supporting the energy transition across Australia and New Zealand. Work closely with senior leaders and key stakeholders to influence business , technology and cyber security outcomes .
Multiple Senior Cyber Operations Analyst ASP6-EL1
Hunter Professional ¡ Posted 15 days ago
About the role
22nd October, 2026 Senior Cyber Security Operations Analysts (APS6/EL1) â Federal Government | ACT, NSW, VIC or QLD Multiple roles | 12-month initial contract, with two 12-month extension options | Hybrid | NV1 clearance required Hunter Professional is looking for experienced Senior Cyber Security Operations Analysts to join a Federal Government departmentâs Cyber Operations team. Working in a Microsoft-focused environment, youâll lead incident response and threat hunting and help improve security operations across Azure and on-premises systems. What youâll do Lead investigations and responses to cyber incidents, from evidence collection and containment through to recovery Carry out proactive threat hunting using Microsoft Sentinel and Defender XDR Act as the technical lead across Sentinel, Defender for Endpoint, Purview and Entra ID Improve detection content, telemetry, automation and incident response playbooks Work with the managed SOC provider and review and validate its outputs Coach analysts and quality-assure investigations and recommendations Give practical, risk-based advice on vulnerability management and governance, risk and compliance (GRC) What youâll bring Strong experience in cyber security operations, including monitoring, triage, incident response, threat hunting and complex investigations Hands-on experience with Microsoft Sentinel, Defender XDR, Defender for Endpoint, Purview and Entra ID A track record of improving detection, processes, automation and workflows alongside SOC providers and technical teams Experience in Australian Government environments, including the PSPF, ISM and Essential Eight (desirable) Certifications such as SC-200, SC-300, SC-401, AZ-500, CISSP, GCIH, GCIA, GCFA or CySA (highly regarded) The ability to obtain a Negative Vetting Level 1 (NV1) clearance How to apply: Click âApplyâ and submit your resume.
Head of Cyber Security
Intellihub ¡ Posted 16 days ago
About the role
Job Description We're looking for a practical and people-focused cyber security leader to lead our cyber security function. As the Head of Cyber Security , you'll be responsible for leading the day-to-day cyber security function and executing Intellihub's cyber security strategy, roadmap and risk management program. Reporting to the CIO, this role provides operational leadership across security operations, governance, risk, compliance, security architecture and cyber resilience activities. Key Accountabilities Lead and deliver Intellihub's cyber security strategy, roadmap and governance framework, driving the ongoing maturity of cyber security capabilities across architecture, resilience and security operations. Identify, assess and mitigate cyber security risks across IT, IoT networks and third-party services. Provide security reporting, risk insights and recommendations to the CIO, Executive Team, customers and regulators. Drive cyber resilience, incident preparedness and recovery capabilities across the organisation. Provide security leadership across technology initiatives, embedding security-by-design principles from concept through to delivery. Oversee security assurance, third-party security risk and the effectiveness of cyber security controls. Act as a trusted cyber security advisor to business, technology and customer stakeholders, promoting security awareness and stakeholder engagement. Lead and develop a high-performing cyber security team, building capability across multiple security disciplines and fostering a culture of collaboration, accountability and continuous improvement. Provide effective oversight of cyber security investments, vendors and specialist partners to support the delivery of business and security outcomes.
Cyber Security Analyst / Assessor
Hays ¡ Posted 18 days ago
About the role
Are you a seasoned GRC professional with ample TPRM experience? Maybe this role is for you! Your new company Join a leading Victorian State Government Agency delivering a critical Cyber Resilience Program aimed at strengthening cyber security capabilities across a large and complex environment. They are investing heavily in secure digital services and is seeking an experienced security professional to help assess and manage risks associated with third-party suppliers, cloud platforms, SaaS solutions, and AI-enabled technologies. Your new role As a TPRM Security Analyst, you will play a critical role in evaluating the security posture of suppliers, products, cloud services, and emerging AI solutions. You will conduct detailed security assessments, identify risks and control gaps, validate supplier evidence, and provide clear recommendations to support informed risk-based decisions.Key responsibilities include: Conducting security assessments of suppliers, cloud platforms, SaaS products, and AI-enabled solutions. Reviewing security architecture, data flows, and technical configurations. Assessing identity and access management, APIs, encryption, logging, network security, vulnerability management, and tenant isolation controls. Evaluating AI-related security risks, including LLM providers, model training, data retention, prompt handling, embeddings, RAG architectures, AI agents, and third-party subprocessors. Reviewing supplier evidence such as certifications, penetration testing reports, architecture diagrams, and security documentation. Documenting security risks, treatment plans, control gaps, and residual risk assessments. Providing approval, conditional approval, exemption, or non-approval recommendations. Presenting assessment outcomes to governance forums and senior stakeholders. Collaborating closely with Procurement, Legal, Privacy, Technology, and Information Security teams. Coordinating and quality-assuring assessments delivered by external security providers. What you'll need to succeed To be successful in this role, you will have: Demonstrated experience in Third-Party Risk Management (TPRM), supplier assurance, security governance, or product security assessments. Strong knowledge of cloud, SaaS, API, identity, and technical security controls. Experience assessing Azure, AWS, or multi-tenant cloud environments. Understanding of Generative AI architectures and associated cyber security risks. Experience validating supplier security controls through evidence-based assessments. Strong analytical thinking, risk assessment, report writing, and stakeholder engagement skills. The ability to work independently, manage competing priorities, and deliver outcomes within agreed timeframes. Experience working within government, education, financial services, or other regulated industries. Knowledge of security frameworks and standards such as VPDSS, ISO 27001, SOC 2, NIST, ISM, PSPF, and Essential Eight. Relevant cyber security, risk, audit, governance, or cloud certifications. What you'll get in return Work within a highly visible and strategically important government initiative. Collaborative and supportive team environment. Flexible working arrangements and a strong focus on professional development. What you need to do now If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or call us now. If this job isn't quite right for you, but you are looking for a new position, please contact us for a confidential discussion on your career. Hays appreciates the importance of workforce diversity and inclusion. We are an equal-opportunities employer and have policies, procedures and relationships in place to promote our understanding of all forms of diversity. 3024851
Lead Penetration Tester- NV1
XPT Software Australia Pty ¡ Posted 18 days ago
About the role
Position: Lead Penetration Tester Security clearance: Must be able to obtain Negative Vetting Level 1 Job details Penetration Testers analyse IT systems to determine configuration weaknesses and faults that would impact on security and business then produce reports detailing the findings and recommendations for improved network security. Cyber Security Penetration Testers conduct complex penetration testing and highly sensitive vulnerability assessment activities. They simulate different types of cyber security attacks and develop penetration testing methodologies. Key duties and responsibilities 1. oversee the execution of test cases using in-depth technical analysis of risks and typical vulnerabilities 2. lead cyber penetration testing and vulnerability assessments using relevant tools and methods against a variety of technologies 3. conduct and lead complex threat simulation activities to identify weaknesses and/or opportunities in technical security controls 4. oversee the catalogue of test findings and potential measures 5. oversee and approve security testing plans 6. provide highly technical subject matter expertise to system owners and stakeholders to improve system security posture 7. conduct highly complex analysis and research to identify improvements to cyber threat tools, techniques and procedures 8. manage and coordinate a variety of risk analysis and assessments on cyber security matters 9. perform web application and mobile penetration testing against complex enterprise platforms using a variety of technologies 10. conduct infrastructure penetration testing against enterprise grade systems 11. collaborate with system owners to develop test scope and preparation for testing ensuring remediation has been completed effectively 12. review reports, briefs and documentation and communicate technical findings and recommendations 13. transfer highly technical skills and knowledge to other staff through continuous coaching and on-the-job training to support succession planning 14. lead and support the operations of a team, including setting priorities and managing performance, resources and workflows 15. exercise delegations in line with legislation and guidelines. Criteria: Essential criteria ⢠1. Forensics: Level 4 (CIISEC) Undertakes basic forensic tasks (e.g. first responder) without supervision. Has some experience of more complex tasks (e.g. using specialist tools to recover, preserve and analyse data) under supervision. ⢠2. Penetration Testing and conducting Simulated Attack Exercises: Level 5 (CIISEC) Uses commercial and bespoke tools to conduct complex penetration testing without close supervision and/or leads teams undertaking complex penetration tests. Undertakes penetration exploits as part of a simulated attack exercise under direction. Appropriate and relevant certifications include CHECK Team Leader, CREST Certified Tester (Infrastructure or Web Applications) or equivalents.
Casual VE Teacher - Cyber Security and Networking (ICT)
Royal Melbourne Institute of Technology ¡ Posted 19 days ago
About the role
Overview: Job Posting Content ⢠Casual hours starting ASAP ⢠Casual VE Teacher ⢠Based at Melbourne CBD but may be required to work and/or be based at other campuses of the University or online. About You Join RMIT as a casual sessional employee and become part of a vibrant academic community. As a casual staff member, youâll enjoy flexibility in your work schedule while contributing to our dynamic learning environment. Casual roles at RMIT involve teaching and supporting students across various disciplines, while adhering to best practices and guidelines. This is an excellent opportunity for professionals who are passionate about education and eager to share their expertise on a flexible basis. Key Selection Criteria: 1. Demonstrated effective interpersonal, communication and problem solving skills relevant to teaching and consultancy environments. This includes effective presentation and facilitation skills, and in the use of flexible teaching methods. 2. Skills and knowledge in the discipline areas of Information Technology or Cyber Security (E.g. CCNA Network Security) or Cloud Computing (E.g. AWS) or Networking (Cisco CCNA) or Database Management (E.g. MySQL or Oracle) or Programming (Java and Python). 3. Demonstrated skills and experience in competency-based assessment. 4. Demonstrated ability in ensuring current and contemporary vocational competence which meets and/or exceeds the education level being delivered and assessed. 5. Demonstrated experience in relevant industry, and substantial discipline knowledge as it relates to this position. 6. Demonstrated capacity to diagnose learning problems in students, propose and implement effective solutions. 7. Demonstrated ability to contribute effectively as a constructive and proactive member of a team. 8. Demonstrated skills in the use of relevant information and communication technologies. Highly Desirable: Qualifications and/or industry experience in Artificial Intelligence (AI), including the practical application of AI technologies, automation, generative AI, or AI governance. Experience teaching and assessing AI-related subjects, and the ability to translate emerging AI concepts into engaging, industry-relevant learning experiences, will be highly regarded. To be successful in this position, youâll also have as a minimum: Qualifications and/or industry experience in Artificial Intelligence (AI), including the practical application of AI technologies, automation, generative AI, or AI governance. Certificate IV in Training and Assessment (TAE40110 or higher) A valid Victorian Employee Working with Children Check (WWCC) Please Note: Appointment to this position is subject to passing a Victorian Employee Working with Children check. About the College of Vocational Education The purpose of RMITâs College of Vocational Education is to empower learners and our industry, community and government partners to succeed in the new world of work. Our five-year strategic roadmap, ALiVE@RMIT, purposefully guides everything we do in vocational education to deliver our vision: to position RMIT as a leading multi-sector provider with global impact and influence. Led by our Deputy Vice Chancellor, the College of VE is reimagining how we deliver vocational education to create unique experiences for our students and partners, so we can: Lead in practice-based learning Empower learners for the future of work Engage industry and community at scale Grow for impact and influence The College of VE is delivering impact through transformation that creates long-term change. To Apply Please submit your CV and short response to selection Criteria clicking on the âApplyâ link at the top of this page. Please submit your documents as First_Last Name CV âJR51421 For further information about this position, please contact [email protected] Applications Close: 12 Nov 2026 11.59 pm RMIT is an equal opportunity employer committed to being a child safe organisation. We are dedicated to attracting, retaining and developing our people regardless of gender identity, ethnicity, sexual orientation, disability and age. Applications are encouraged from all sectors of the community, and we strongly encourage applications from the Aboriginal and/or Torres Strait Islander community. In line with RMIT Universityâs commitment to a safe, respectful and inclusive environment, from 1 January 2026, the University will also consider gender-based violence (GBV) risk factors as part of our recruitment processes. All applicants will be required to complete a genderâbased violence declaration in accordance with the National Higher Education Code to Prevent and Respond to Gender-based Violence . Preferred candidates will also be required to undertake relevant preâemployment background checks, including Working With Children Checks. Information provided will be treated confidentially and considered only for its relevance to the role and RMITâs safety obligations. At RMIT, we are committed to supporting adjustments throughout the recruitment and selection process, as well as during employment. We actively support and encourage people with disability to apply to RMIT (including alternate formats of application forms). To discuss adjustment requirements, please contact Dani, via [email protected] or visit our Careers page for more contact information - https://www.rmit.edu.au/careers. We are a Circle Back Initiative Employer â we commit to respond to every applicant.
CyberCX - Strategy & Consulting Manager
Accenture Australia ¡ Posted 19 days ago
About the role
The work we do matters CyberCX, part of Accenture, protects and defends our customers and communities by providing the most comprehensive range of cyber security professional services in the region. About Accenture Accenture is a global professional services company with leading capabilities in digital, cloud and security. Find out more about us at www.accenture.com . About the Role: The Strategy & Consulting Manager is responsible for leading project teams of Strategy & Consulting specialists and acting as a trusted cyber security advisor to senior stakeholders in Australia's largest organisations. This is achieved by providing direction and support to consultants as part of engagement teams, and through building client trust by communicating with influence, demonstrating excellence in planning and execution, and contributing deep cyber security knowledge. The Strategy & Consulting Manager actively contributes throughout the client engagement life cycle, from identifying and qualifying opportunities, to delivery and closure, in addition to ongoing management of client relations. Key skills and requisites: 5 yearsâ experience working for a global consulting firm or large technology company in cyber security, ideally with experience across privacy or data management or strategic risk. Ability to communicate ideas and concepts with structure, clarity, and precision Bachelorâs or masterâs degree in cyber security, business administration, accounting, finance, information system, computer engineering or related field is preferred. Experience coaching, mentoring, and leading others to build their capabilities, encourage employee engagement, promote a positive learning environment and deliver high quality outcomes for customers A demonstrated track record of providing impactful client outcomes through high-quality delivery, effective team management and delegation Strong experience in applying a strategic mindset and understanding how engagements fit into a broader business context Experience identifying opportunities and helping qualify and sell engagements About Accenture Accenture is a leading global professional services company that helps the worldâs leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen servicesâcreating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the worldâs leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360° value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360° value we create for our clients, each other, our shareholders, partners and communities. Visit us at www.accenture.com Equal Employment Opportunity Statement for Australia: At Accenture, our intention is to foster a culture and a workplace in which all of our people feel a sense of belonging and are respected and empowered to do their best work. As part of our talent strategy, we hire and develop people who have different backgrounds, different perspectives and different lived experiences. These differences ensure that we have and attract the cognitive diversity to deliver a variety of perspectives, observations and insights which are essential to drive the innovation needed to reinvent, and we hold our leaders accountable for ensuring we have the most innovative and talented people in our industry. We encourage applications from all people, and we are committed to removing barriers to the recruitment process and employee lifecycle. All employment decisions shall be made without regard to age, disability status, ethnicity, gender, gender identity or expression, religion or sexual orientation and we do not tolerate discrimination. If you require adjustments to the recruitment process or have a preferred communication method, please email [email protected] and cite the relevant Job Number, or contact us on 61 2 9005 5000 . Learn how Accenture protects your personal data and know your rights in relation to your personal data. Read more about our Privacy Statement
Lead Penetration Tester- NV1
XPT Software Australia Pty Ltd ¡ Posted 19 days ago
About the role
Position: Lead Penetration Tester Security clearance: Must be able to obtain Negative Vetting Level 1 Job details Penetration Testers analyse IT systems to determine configuration weaknesses and faults that would impact on security and business then produce reports detailing the findings and recommendations for improved network security. Cyber Security Penetration Testers conduct complex penetration testing and highly sensitive vulnerability assessment activities. They simulate different types of cyber security attacks and develop penetration testing methodologies. Key duties and responsibilities 1. oversee the execution of test cases using in-depth technical analysis of risks and typical vulnerabilities 2. lead cyber penetration testing and vulnerability assessments using relevant tools and methods against a variety of technologies 3. conduct and lead complex threat simulation activities to identify weaknesses and/or opportunities in technical security controls 4. oversee the catalogue of test findings and potential measures 5. oversee and approve security testing plans 6. provide highly technical subject matter expertise to system owners and stakeholders to improve system security posture 7. conduct highly complex analysis and research to identify improvements to cyber threat tools, techniques and procedures 8. manage and coordinate a variety of risk analysis and assessments on cyber security matters 9. perform web application and mobile penetration testing against complex enterprise platforms using a variety of technologies 10. conduct infrastructure penetration testing against enterprise grade systems 11. collaborate with system owners to develop test scope and preparation for testing ensuring remediation has been completed effectively 12. review reports, briefs and documentation and communicate technical findings and recommendations 13. transfer highly technical skills and knowledge to other staff through continuous coaching and on-the-job training to support succession planning 14. lead and support the operations of a team, including setting priorities and managing performance, resources and workflows 15. exercise delegations in line with legislation and guidelines. Criteria: Essential criteria ⢠1. Forensics: Level 4 (CIISEC) Undertakes basic forensic tasks (e.g. first responder) without supervision. Has some experience of more complex tasks (e.g. using specialist tools to recover, preserve and analyse data) under supervision. ⢠2. Penetration Testing and conducting Simulated Attack Exercises: Level 5 (CIISEC) Uses commercial and bespoke tools to conduct complex penetration testing without close supervision and/or leads teams undertaking complex penetration tests. Undertakes penetration exploits as part of a simulated attack exercise under direction. Appropriate and relevant certifications include CHECK Team Leader, CREST Certified Tester (Infrastructure or Web Applications) or equivalents.
Cyber Security Manager - Country Road Group
Country Road Group ¡ Posted 20 days ago
About the role
At Country Road Group, our Group Functions sit at the heart of our business, driving the success of our portfolio of distinctive brands and enabling them to do what they do best. Working across the business, you will play a vital role in shaping how we operate, grow, and innovate, bringing our strategy to life. As the Cyber Security Manager, you will lead the cyber operational and engineering capability that protects Country Road Groupâs systems and data. Reporting directly to the Head of IT: Enabling Platforms & Operations, you will lead our Cyber Security Analyst and Engineer, oversee security monitoring and incident response, and own the architecture and engineering roadmap for our core security controls and platforms. This is a hands-on, solutions-focused cyber leadership role. We are looking for someone with a strong technical foundation in cyber security who has built their career through security operations, engineering or architecture and is now ready to combine that technical expertise with people leadership, vendor management and broader business influence. You will be comfortable getting into the technical detail, taking ownership of security challenges and working within a complex and fast-paced environment to turn cyber risks into practical solutions. How You Will Contribute Lead, mentor and develop our cyber security team, overseeing the triage, investigation and response to security incidents and alerts Own the architecture and engineering roadmap for core security platforms, including MDR, XDR, SIEM, vulnerability management, email security and cloud security Develop and continuously improve incident response plans and playbooks, taking the lead during significant security incidents Drive improvements to detection and response capability in partnership with our outsourced MDR provider Design and implement scalable security controls and reference architectures across CRGâs evolving technology environment Take ownership of security vulnerabilities and technical risks, working with technology teams to develop and implement practical solutions Manage key security vendors and technology partners across performance, SLAâs, licensing, costs and ongoing service delivery Conduct IT security risk assessments and translate technical findings into clear, actionable recommendations for senior business leaders Partner with technology teams and senior stakeholders on security architecture, engineering decisions, technical trade-offs and cyber risk Partner with Risk & Governance teams on requirements such as PCI-DSS, ensuring compliance requirements translate into effective technical controls Maintain current knowledge of the cyber threat landscape and emerging technologies, continuously identifying opportunities to strengthen CRGâs security posture. Capabilities We Value 5 yearsâ experience in Cyber Security, with a strong technical background across security operations, engineering and/or architecture Demonstrated career experience working hands-on with cyber security technology, with subsequent progression into a lead, manager or senior technical role Strong knowledge of security architecture and engineering across areas such as network security, cloud security, endpoint/EDR and identity and access management Experience designing, implementing or maturing security tooling and controls such as MDR, XDR, SIEM and vulnerability management Strong incident response capability, including investigating security events, developing response playbooks and leading the resolution of significant incidents A solutions-focused mindset with the ability to move beyond identifying risk to designing and implementing practical solutions Demonstrated ability to lead, mentor and develop technical cyber security professionals Strong vendor management capability, including experience managing technology partners, service performance, SLAâs, licensing and commercial considerations Ability to translate complex technical risks into clear, business-relevant recommendations and influence senior stakeholders Working knowledge of frameworks such as ISO/IEC 27001/2, NIST, CIS and MITRE ATT&CK, with relevant cyber security or cloud certifications highly regarded Tertiary qualifications in Cyber Security, Computer Science, Information Technology, Engineering or a related discipline Retail experience and exposure to PCI-DSS would be advantageous, however we welcome experienced cyber security professionals from other complex technology environments. What We Offer Bi-annual product allowance, access to sample sales and 40% discount for you and your immediate family across all CRG brands Flex your leave your way, including birthday leave, volunteer leave, personal leave and more Access to health and wellbeing support, including Health Insurance, 24/7 EAP counselling, discounted gym memberships and financial advice services 18 weeks paid parental leave program for eligible employees with return-to-work clothing allowance Internal career opportunities across our brands Annual learning calendar to support your ongoing development Support impactful community and charity partnerships across our brands, including OCRF, Our Watch, First Nations Reconciliation, Movember, Red Cross and Landcare. Who We Are Country Road Group is a design-led portfolio of premium fashion brands, comprising five iconic labels: Country Road, Mimco, Trenery, Witchery and Politix. Each brand has its own story, and together they hold a market-leading position in the mid to upper tier of Australia's specialty fashion segment with a focus on delivering our ambition to build a portfolio of distinctive brands that drive sustainable growth. Country Road Group is part of Woolworths Holdings Limited (South Africa), a leading Southern Hemisphere retail group. We encourage you to explore our Current Opportunities and we look forward to connecting with you! Country Road Group acknowledges the Traditional Owners of Country throughout Australia and recognises their continuing connection to lands, waters and communities. We pay our respects to Aboriginal and Torres Strait Islander cultures and to Elders past and present. Weâre committed to inclusion and accessibility. If we can support you with any adjustments at any stage, please let us know.
Cyber Security Manager - Country Road Group
Country Road ¡ Posted 20 days ago
About the role
At Country Road Group, our Group Functions sit at the heart of our business, driving the success of our portfolio of distinctive brands and enabling them to do what they do best. Working across the business, you will play a vital role in shaping how we operate, grow, and innovate, bringing our strategy to life. As the Cyber Security Manager, you will lead the cyber operational and engineering capability that protects Country Road Groupâs systems and data. Reporting directly to the Head of IT: Enabling Platforms & Operations, you will lead our Cyber Security Analyst and Engineer, oversee security monitoring and incident response, and own the architecture and engineering roadmap for our core security controls and platforms. This is a hands-on, solutions-focused cyber leadership role. We are looking for someone with a strong technical foundation in cyber security who has built their career through security operations, engineering or architecture and is now ready to combine that technical expertise with people leadership, vendor management and broader business influence. You will be comfortable getting into the technical detail, taking ownership of security challenges and working within a complex and fast-paced environment to turn cyber risks into practical solutions. How You Will Contribute Lead, mentor and develop our cyber security team, overseeing the triage, investigation and response to security incidents and alerts Own the architecture and engineering roadmap for core security platforms, including MDR, XDR, SIEM, vulnerability management, email security and cloud security Develop and continuously improve incident response plans and playbooks, taking the lead during significant security incidents Drive improvements to detection and response capability in partnership with our outsourced MDR provider Design and implement scalable security controls and reference architectures across CRGâs evolving technology environment Take ownership of security vulnerabilities and technical risks, working with technology teams to develop and implement practical solutions Manage key security vendors and technology partners across performance, SLAâs, licensing, costs and ongoing service delivery Conduct IT security risk assessments and translate technical findings into clear, actionable recommendations for senior business leaders Partner with technology teams and senior stakeholders on security architecture, engineering decisions, technical trade-offs and cyber risk Partner with Risk & Governance teams on requirements such as PCI-DSS, ensuring compliance requirements translate into effective technical controls Maintain current knowledge of the cyber threat landscape and emerging technologies, continuously identifying opportunities to strengthen CRGâs security posture. Capabilities We Value 5 yearsâ experience in Cyber Security, with a strong technical background across security operations, engineering and/or architecture Demonstrated career experience working hands-on with cyber security technology, with subsequent progression into a lead, manager or senior technical role Strong knowledge of security architecture and engineering across areas such as network security, cloud security, endpoint/EDR and identity and access management Experience designing, implementing or maturing security tooling and controls such as MDR, XDR, SIEM and vulnerability management Strong incident response capability, including investigating security events, developing response playbooks and leading the resolution of significant incidents A solutions-focused mindset with the ability to move beyond identifying risk to designing and implementing practical solutions Demonstrated ability to lead, mentor and develop technical cyber security professionals Strong vendor management capability, including experience managing technology partners, service performance, SLAâs, licensing and commercial considerations Ability to translate complex technical risks into clear, business-relevant recommendations and influence senior stakeholders Working knowledge of frameworks such as ISO/IEC 27001/2, NIST, CIS and MITRE ATT&CK, with relevant cyber security or cloud certifications highly regarded Tertiary qualifications in Cyber Security, Computer Science, Information Technology, Engineering or a related discipline Retail experience and exposure to PCI-DSS would be advantageous, however we welcome experienced cyber security professionals from other complex technology environments. What We Offer Bi-annual product allowance, access to sample sales and 40% discount for you and your immediate family across all CRG brands Flex your leave your way, including birthday leave, volunteer leave, personal leave and more Access to health and wellbeing support, including Health Insurance, 24/7 EAP counselling, discounted gym memberships and financial advice services 18 weeks paid parental leave program for eligible employees with return-to-work clothing allowance Internal career opportunities across our brands Annual learning calendar to support your ongoing development Support impactful community and charity partnerships across our brands, including OCRF, Our Watch, First Nations Reconciliation, Movember, Red Cross and Landcare. Who We Are Country Road Group is a design-led portfolio of premium fashion brands, comprising five iconic labels: Country Road, Mimco, Trenery, Witchery and Politix. Each brand has its own story, and together they hold a market-leading position in the mid to upper tier of Australia's specialty fashion segment with a focus on delivering our ambition to build a portfolio of distinctive brands that drive sustainable growth. Country Road Group is part of Woolworths Holdings Limited (South Africa), a leading Southern Hemisphere retail group. We encourage you to explore our Current Opportunities and we look forward to connecting with you! Country Road Group acknowledges the Traditional Owners of Country throughout Australia and recognises their continuing connection to lands, waters and communities. We pay our respects to Aboriginal and Torres Strait Islander cultures and to Elders past and present. Weâre committed to inclusion and accessibility. If we can support you with any adjustments at any stage, please let us know.
Senior Data Security Analyst | Cyber Security | Telecommunications
First Recruitment International ¡ Posted 20 days ago
About the role
In short: A senior data security role within the information security function of a major Australian telecommunications business, running data security posture management, data loss prevention, classification and assurance across a complex regulated environment. 4â5 years in cyber security covering data governance, data protection or operational assurance required. DâArcy Weil is recruiting a Senior Data Security Analyst on behalf of a major Australian telecommunications business. The role sits within information security and holds accountability for how sensitive data is protected, monitored and governed across the business, including: Designing, deploying and running data security posture management capabilities with technology vendors Tracking data security vulnerabilities and industry practice, and recommending improvements Working with data custodians to validate how data is classified and handled Connecting data security tooling to event monitoring, with dashboards and alerts that surface access to sensitive data Maintaining records of how third parties use company data, and supporting compliance with contractual and regulatory security requirements Gathering evidence for risk reviews and assurance reporting, and coordinating data security incidents It suits a security professional who can configure the tools, understand the regulatory obligations and explain the risk to people outside the security team. The Role Posture management: Lead the design, deployment and ongoing operation of data security posture management capabilities, working with technology vendors to strengthen platforms, integrations and risk controls Threat awareness: Track developments in data security vulnerabilities and industry practice, assess their relevance to the business and recommend improvements to the overall security position Data classification: Work with business data custodians to review and validate how data is categorised and handled, and confirm that practice reflects regulatory obligations and internal standards SIEM integration: Connect data security systems to event monitoring tools, and build dashboards and alerts that surface access to sensitive data and support compliance reporting Asset and third party records: Work with IT service management colleagues to keep configuration data in asset management systems accurate, and maintain records of how external parties use company data Risk and assurance: Gather and assess evidence for risk reviews, assurance reporting and governance forums, communicate data security risk clearly to stakeholders and help close compliance gaps Incident coordination: Manage data security incidents within the data governance remit, including logging, evidence collection and remediation tracking, and build security awareness across the workforce About You 4â5 years in cyber security covering data governance, data protection or operational assurance in a regulated environment A tertiary qualification in cyber security, information technology or a related discipline, or an equivalent industry credential Hands-on experience with data loss prevention technologies, security control configuration and operational risk assessment Strong communication, able to explain technical concepts to non-technical audiences Knowledge of data classification, access controls and how data security, privacy and records management intersect Experience with ISO 27001, cyber security frameworks and cloud security advantageous Whatâs on Offer Base of $125,000 to $150,000 plus superannuation and performance bonus Ownership of data security posture across a complex, regulated telecommunications environment Hands-on work with data loss prevention, SIEM and posture management tooling Discounted employee products and services, and flexible working arrangements Structured career development and certification support within a large, well-resourced business Apply with a CV and a brief profile covering: The data security, data protection or data governance work you have delivered Your hands-on experience with data loss prevention and security control configuration Your experience with ISO 27001, cyber security frameworks or cloud security For a confidential discussion, or for more information, contact: Ivan Pignataro | Director DâArcy Weil M: 0416 507 856 E: [email protected] Only candidates with current Australian working rights will be considered. All applications and enquiries will be treated in strict confidence. DataSecurity CyberSecurity DataProtection DLP InfoSec Telecommunications ITJobs SecurityJobs
EL2 Lead Security Architect
Softtest pays pty ¡ Posted 23 days ago
About the role
Job Description: Australian Citizens residing in Australia only respond. Job details The EL2 Senior Cyber Security Specialist (Labour Hire) is accountable under broad direction to undertake very complex design and security risk assessment work that delivers quality outcomes across the diverse technology functions of the NDIA. The position is an important position within the NDIA and will have delegated authority and responsibility to resolve issues and risks across wide-ranging activities of substantial depth involving significant detail. The role will provide design leadership, risk evaluation and decision making and is responsible for actively managing key internal and external stakeholder relationships. The position is responsible for actively managing key internal and external stakeholder relationships and where required will represent and negotiate on behalf of the NDIA to advance the NDIA's interests across a range of forums. Key duties and responsibilities Responsibilities of the role include but are not limited to: Developing cyber security architecture and detailed security design documents, including Role Based Access controls for NDIA internal systems. Leading and conducting risk assessments for NDIA internal systems and assessing risk from external connections. Undertaking compliance activities in relation to cyber security standards within the Agency aligned to cyber security architecture and industry best practice. Resolving complex IT related issues and risks across wide-ranging activities of substantial depth involving significant detail. Developing and participating in the implementation of NDIA initiatives focused on the reduction of technology risk, governance and compliance to policies and regulatory compliance. Developing and applying IT security standards, policy, procedures, and controls for managing risks. Supporting various business areas by ensuring stakeholders adequately address all relevant compliance standards such as the PSPF, ISM, Agency Risk Management Frameworks and incident management disciplines. Presenting to senior forums, project teams and other groups at a technical and business level and working with a broad range of stakeholders in a collaborative and solution oriented manner. Completing and investigating internal and external information security risk and exceptions assessments and documenting and reporting control failures and gaps to stakeholders. (NOTE: the key responsibilities of the role are based on current priorities and may change over time) Required Skills: Project Teams Information Security Access Incident Management Compliance Regulatory Compliance Risk Assessment Architecture Risk Management Security Design Business Leadership Management
CyberCX - Cyber Security Strategy Consultant
Accenture Australia ¡ Posted 25 days ago
About the role
CyberCX, part of Accenture. This role sits as part of the CyberCX's Cyber Security Strategy & Consulting Practice. The ideal candidate will have a minimum 1 years' professional work experience in policy writing, cyber security strategy, or consulting. You will enjoy being client facing and keen to develop your existing Cyber Security knowledge in Cyber Security Strategy area. If you have 3-5 years' experience, please apply for the Senior Consultant position. Conduct research and synthesise information to assist the Strategy & Consulting team to develop cyber security strategies, policies, processes, and procedures to protect our clients and their customers Support development and delivery of end to end Strategy & Consulting engagements Distil research into briefs and presentations for the Strategy & Consulting team to utilise internally and externally Support the Strategy & Consulting team to advise on clientsâ cyber security investment and monitoring performance for boards and senior leadership Assist the Strategy & Consulting team to prepare clients for critical cyber security incidents Understand the key principles required and learn how to build cyber security awareness amongst our clientsâ leadership teams Support the Strategy & Consulting team to produce high-quality proposals, reports, and presentations 1 yearsâ experience in technology or risk consulting, ideally with experience working for a global consulting firm or large technology company. Cyber security experience is highly regarded Good personal presence and the ability to effectively engage with senior client stakeholders The ability to present and communicate with structure, clarity, and precision. A strategic mindset and an understanding of how engagements fit into a broader business context About Accenture Accenture is a leading global professional services company that helps the worldâs leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen servicesâcreating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the worldâs leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360° value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360° value we create for our clients, each other, our shareholders, partners and communities. Visit us at www.accenture.com Equal Employment Opportunity Statement for Australia: At Accenture, our intention is to foster a culture and a workplace in which all of our people feel a sense of belonging and are respected and empowered to do their best work. As part of our talent strategy, we hire and develop people who have different backgrounds, different perspectives and different lived experiences. These differences ensure that we have and attract the cognitive diversity to deliver a variety of perspectives, observations and insights which are essential to drive the innovation needed to reinvent, and we hold our leaders accountable for ensuring we have the most innovative and talented people in our industry. We encourage applications from all people, and we are committed to removing barriers to the recruitment process and employee lifecycle. All employment decisions shall be made without regard to age, disability status, ethnicity, gender, gender identity or expression, religion or sexual orientation and we do not tolerate discrimination. If you require adjustments to the recruitment process or have a preferred communication method, please email [email protected] and cite the relevant Job Number, or contact us on 61 2 9005 5000 . Learn how Accenture protects your personal data and know your rights in relation to your personal data. Read more about our Privacy Statement
EL2 Lead Security Architect
Softtest pays pty ltd ¡ Posted 25 days ago
About the role
Australian Citizens residing in Australia only respond. Job details Role: EL2 Senior Cyber Security Specialist The EL2 Senior Cyber Security Specialist (Labour Hire) is accountable under broad direction to undertake very complex design and security risk assessment work that delivers quality outcomes across the diverse technology functions of the NDIA. The position is an important position within the NDIA and will have delegated authority and responsibility to resolve issues and risks across wide-ranging activities of substantial depth involving significant detail. The role will provide design leadership, risk evaluation and decision making and is responsible for actively managing key internal and external stakeholder relationships. The position is responsible for actively managing key internal and external stakeholder relationships and where required will represent and negotiate on behalf of the NDIA to advance the NDIA's interests across a range of forums. Key duties and responsibilities Responsibilities of the role include but are not limited to: Developing cyber security architecture and detailed security design documents, including Role Based Access controls for NDIA internal systems. Leading and conducting risk assessments for NDIA internal systems and assessing risk from external connections. Undertaking compliance activities in relation to cyber security standards within the Agency aligned to cyber security architecture and industry best practice. Resolving complex IT related issues and risks across wide-ranging activities of substantial depth involving significant detail. Developing and participating in the implementation of NDIA initiatives focused on the reduction of technology risk, governance and compliance to policies and regulatory compliance. Developing and applying IT security standards, policy, procedures, and controls for managing risks. Supporting various business areas by ensuring stakeholders adequately address all relevant compliance standards such as the PSPF, ISM, Agency Risk Management Frameworks and incident management disciplines. Presenting to senior forums, project teams and other groups at a technical and business level and working with a broad range of stakeholders in a collaborative and solution oriented manner. Completing and investigating internal and external information security risk and exceptions assessments and documenting and reporting control failures and gaps to stakeholders. (NOTE: the key responsibilities of the role are based on current priorities and may change over time)