Cyber Security Consultant

Harvey Norman; Strathfield Municipal Council; On-site; AUD 120,000 - 180,000; Full time

Benefits offered by this job

Salary packaging & novated leasing

Parental leave

Udemy training access

Career progression

Global brand experience

Supportive team environment

Employee discounts

Job summary

Harvey Norman invites applications for a Cyber Security Consultant to join our onsite team at the Silverwater Corporate Office. You will work with security leaders, project teams, solution architects, stakeholders and vendors to embed security-by-design across business and technology initiatives, assessing solutions and recommending practical controls.

Key activities include security and third-party risk assessments, reviewing designs, coordinating testing and guiding risk remediation.

Qualifications

• Minimum 5 years in cyber security or related area.
• Experience reviewing architectures, data flows and integrations.
• Experience with information security and third-party risk assessments.
• Knowledge of ISO 27001, NIST CSF, OWASP and IAM.
• Security concepts across cloud, networks, apps, and integrations.

Responsibilities

• Conduct information security assurance reviews across business and technology initiatives, embedding security-by-design from initiation to closure.
• Develop and communicate security requirements, standards and assurance guidance for projects and third-party engagements.
• Partner with architects, project teams, stakeholders and vendors to identify risks and recommend pragmatic controls.
• Perform third party risk assessments including review of questionnaires, certifications and audit reports.
• Review solution architectures to ensure alignment with security requirements and best practices.
• Coordinate vulnerability assessments, security configuration reviews and testing activities.
• Track and remediate identified vulnerabilities and manage risk through to formal acceptance.
• Carry out ISRA for projects and initiatives following Harvey Norman's framework.
• Document, monitor and escalate risks through governance processes.

Skills

Cyber security

Risk management

Stakeholder engagement

Security governance

Cloud security

Education

Degree in IT/CS/Cyber Security

CISSP/CISM/CRISC/CCSP (preferred)

Job description

e.g. "Service Desk Analyst Homebush West"

Work type

• Full Time 1

Locations

Australia

Categories

Franchisor Office

Cyber Security Consultant

Job no: 577083
Work type: Full Time
Location: Homebush West
Categories: Information Technology

• Opportunities to make discounted purchases on a great range of products.
• Access to Udemy an online training platform with over 5,500 courses.
• Experience working within a diverse, unique, and successful global organisation.

As one of Australia’s largest retailers of lifestyle products, with more than 300 complexes worldwide, Harvey Norman® has been a part of almost every Australian’s shopping experience. Whether getting the latest electronic gadgets, or furnishing your first home, Harvey Norman® is the place where you can shop with confidence.

About the role

Reporting to the Cyber Security Assurance Manager and based onsite at the Silverwater Corporate Office, you will work closely with security leaders, project teams, solution architects, business stakeholders and vendors to embed security-by-design principles across business and technology initiatives. Acting as a trusted security advisor, you will assess proposed solutions, identify security risks and recommend practical controls that support secure business outcomes.

This role will involve conducting security and third-party risk assessments, reviewing solution designs, coordinating security testing and managing identified risks through to remediation or formal acceptance. You will also contribute to improving the organisation’s information security assurance frameworks, processes and standards.

You will

• Conduct Information Security Assurance reviews across business and technology initiatives, ensuring security-by-design principles are embedded throughout the project lifecycle from initiation through to implementation and closure.
• Develop, maintain and communicate security requirements, assessment criteria, standards and assurance guidance to support the consistent application of security controls across projects and third-party engagements.
• Partner with solution architects, project teams, business stakeholders and vendors to identify security risks, assess potential business impact and recommend pragmatic security controls and risk treatment options.
• Perform Third Party Risk Assessments (TPRA) of vendors, products and services, including the review of security questionnaires, certifications, audit reports and supporting evidence to support informed risk-based decision-making.
• Review solution architectures, designs, integrations, data flows and technology implementations to ensure alignment with organisational security requirements, standards and industry best practices.
• Coordinate and perform security assessment activities including vulnerability assessments, security configuration reviews, web application security testing, external penetration testing engagements etc.
• Review security assessment findings and work with project teams, vendors and stakeholders to ensure identified vulnerabilities, weaknesses and security risks are appropriately remediated or formally accepted.
• Perform Information Security Risk Assessments (ISRA) for projects, technology implementations and business initiatives in accordance with Harvey Norman's risk management framework.
• Document, track, monitor and escalation of identified security risks through established governance processes, ensuring remediation activities, mitigation plans and risk acceptance decisions are managed through to closure.
• Contribute to the continuous improvement and maturity of the Information Security Assurance function through the adoption of industry best practices and enhancement of assurance methodologies, templates and processes.

About you

You are a proactive cyber security professional who can balance security requirements with business needs and provide practical, risk-based advice to stakeholders. With strong analytical skills, sound judgement and attention to detail, you take a risk-based approach and remain current with emerging cyber threats, technologies and industry practices.

You will have

• At least 5 years’ experience in cyber security, information security assurance, risk management or a related area.
• Experience reviewing solution architectures, technology implementations, integrations and data flows.
• Experience conducting information security and third-party risk assessments.
• Exposure to vulnerability assessments, security reviews and penetration testing activities.
• Sound knowledge of security frameworks and practices such as ISO 27001, NIST Cybersecurity Framework, OWASP, Identity and Access management, Zero Trust etc..
• An understanding of security principles across cloud, infrastructure, networks, applications and integrations.
• Strong stakeholder engagement, communication and influencing skills.
• The ability to manage multiple projects and competing priorities in a fast-paced environment.

Qualification:

• Degree qualification in Information Technology, Computer Science, Cyber Security or a related discipline, or equivalent industry experience.
• Industry-recognised Information Security certifications such as CISSP, CISM, CRISC, CCSP or equivalent certifications (preferred).
• Relevant security architecture, cloud security, risk management or security assurance certifications will be highly regarded.

This opportunity will provide:

• Salary packaging and novated leasing options for eligible employees.
• Company paid parental leave for eligible employees.
• Access to Udemy an online training platform with over 5,500 courses.
• Professional development and career progression.
• Experience working with an Iconic Australian Brand with global success in NZ, Asia, and Europe.
• A supportive team environment that celebrates diversity and promotes a healthy work and family life balance.
• Opportunities to make discounted purchases on a great range of products and services.

Please note that only people with the right to work in Australia should apply for this position.