Cyber security specialist

Pyramid Global Technologies; New South Wales; On-site; AUD 120,000 - 160,000; Full time

Job summary

A leading technology firm based in Australia is seeking a cyber security expert with a minimum of 10 years' experience. The role involves managing governance, risk, and compliance, and demands relevant industry certifications along with a comprehensive understanding of security standards. Candidates should be adept at delivering and improving Information Security Management Systems (ISMS) and conducting risk assessments.

Qualifications

• A minimum of 10 years of experience in cyber security roles within major organisations.
• Relevant industry certification(s) such as CISSP, CISM, CRISC, CISA.
• Comprehensive understanding of industry security standards.
• Significant experience in the development of security management systems.

Responsibilities

• Support the delivery of the Information Security Management System (ISMS).
• Conduct cyber security self-assessment and controls assurance exercises.
• Undertake cyber security risk advisory services.
• Manage and report on cyber security risks.

Skills

Governance, risk, and compliance management

Industry certification(s) such as CISSP, CISM

Understanding of security standards and compliance frameworks

Information security management systems

Security control assurance programs

Supply chain risk assessment frameworks

Contemporary security technologies

Job description

Qualifications

• A minimum of 10 years of experience in cyber security roles within major organisations, focusing on management of governance, risk, and compliance.
• Relevant industry certification(s) such as CISSP, CISM, CRISC, CISA, ISO/IEC 27001 Lead Implementer/Auditor and/or relevant industry experience
• Comprehensive understanding of industry-wide security standards and compliance frameworks such as ISO/IEC 27001, NIST, PCI DSS, HIPAA, GDPR etc.
• Significant experience in the development and implementation of information security management systems, policies, and standards.
• Significant experience in the development and implementation of security control assurance programs.
• Significant experience in the development and implementation of supply chain risk assessment frameworks.
• Demonstrated familiarity with contemporary security technologies and products.

Responsibilities

• Support the delivery and continuous improvement of the Information Security Management System (ISMS), including governance policies, standards, and processes, to ensure that cyber security risks are appropriately managed.
• Conduct cyber security self-assessment and controls assurance exercises designed to assess whether key controls are operating effectively and consistently, including auditing of internal cyber security controls and assessment of 3rd party/supply chain risk exposure.
• Undertake cyber security risk advisory or strategy services designed to identify, evaluate, report on, and remediate cyber security risk.
• Cyber security risk management and reporting.