Security Engineer - Assurance

George Weston Foods; Sydney; On-site; AUD 120,000 - 180,000; Full time

Job summary

George Weston Foods is seeking a Security Engineer - Assurance to support security assurance, third-party reviews, and broader security operations across our enterprise. You will translate policies into practical assurance activities and help mature security controls.

You will build metrics, dashboards and reporting to provide visibility of control effectiveness and risk, and you will drive automation of assurance, compliance validation and evidence collection to improve efficiency and quality

Qualifications

• Tertiary qualifications in a relevant technology discipline.
• Professional security certifications such as CISSP, Security+, MCSE Security or similar will be highly regarded.
• Experience in enterprise infrastructure and cloud environments; monitoring, logging and security operations.
• Strong understanding of information security principles, controls, protocols and standards.
• Experience with identity and access management, vulnerability management, security monitoring and governance.

Responsibilities

• Interpret security policies, standards and controls into practical assurance activities.
• Develop security metrics, dashboards and reporting to show control effectiveness and risk.
• Analyse data from security and IT platforms to identify trends and improvement opportunities.
• Automate assurance, compliance validation, reporting and evidence collection.
• Own and improve third-party security risk management including supplier assessments.
• Identify and communicate security risks, control gaps and remediation recommendations.
• Support security improvement initiatives and new capabilities delivery.
• Provide practical security guidance and promote a positive security culture across the organisation.

Skills

Security governance

Stakeholder engagement

Analytical thinking

Problem solving

Collaboration

Education

Tertiary technology degree

Security certifications (CISSP, Security+, MCSE Security)

Tools

APIs

Scripting

Low-code

Reporting tools

Job description

George Weston Foods makes some of Australia and New Zealand's favourite and most innovative products! Chances are that one of our iconic brands is sitting on your table, packed in your lunchbox or resting in your pantry right now. Join the team and be part of one of our iconic brands like Tip Top®, Abbotts Village Bakery®, Burgen®, Golden®, DON®, KR Castlemaine® and Yumi's®.

Job Description:

As a Security Engineer - Assurance, you will play a key role in supporting security assurance, third-party security reviews, implementation of security standards, security projects and broader security operations activities. Working closely with business and technology stakeholders, you will help ensure security controls remain effective, security risks are appropriately managed and organisational security capabilities continue to mature. This role is ideally suited to a strong security generalist with an assurance and risk mindset who can deliver practical security outcomes across multiple technology domains.

On a day-to-day basis, you will:

Interpret security policies, standards and control requirements and translate them into practical security assurance activities.

Develop security metrics, dashboards and reporting to provide visibility of control effectiveness and risk.

Analyse information from security and IT platforms to identify trends, risks and opportunities for improvement.

Drive automation of security assurance, compliance validation, reporting and evidence collection activities to improve efficiency and quality outcomes.

Own and continuously improve the third-party security risk management process, including supplier security assessments and remediation activities.

Identify, document and communicate security risks, control gaps and remediation recommendations across the organisation.

Support the delivery of security improvement initiatives, strategic projects and the implementation of new security capabilities, controls and technologies.

• Provide practical security guidance, deliver awareness initiatives and promote a positive security culture across the organisation.

Company description:

George Weston Foods makes some of Australia and New Zealand's favourite and most innovative products! Chances are that one of our iconic brands is sitting on your table, packed in your lunchbox or resting in your pantry right now. Join the team and be part of one of our iconic brands like Tip Top®, Abbotts Village Bakery®, Burgen®, Golden®, DON®, KR Castlemaine® and Yumi's®.

Job description:

Job Description:

As a Security Engineer - Assurance, you will play a key role in supporting security assurance, third-party security reviews, implementation of security standards, security projects and broader security operations activities. Working closely with business and technology stakeholders, you will help ensure security controls remain effective, security risks are appropriately managed and organisational security capabilities continue to mature. This role is ideally suited to a strong security generalist with an assurance and risk mindset who can deliver practical security outcomes across multiple technology domains.

On a day-to-day basis, you will:

• Interpret security policies, standards and control requirements and translate them into practical security assurance activities.

• Develop security metrics, dashboards and reporting to provide visibility of control effectiveness and risk.

• Analyse information from security and IT platforms to identify trends, risks and opportunities for improvement.

• Drive automation of security assurance, compliance validation, reporting and evidence collection activities to improve efficiency and quality outcomes.

• Own and continuously improve the third-party security risk management process, including supplier security assessments and remediation activities.

• Identify, document and communicate security risks, control gaps and remediation recommendations across the organisation.

• Support the delivery of security improvement initiatives, strategic projects and the implementation of new security capabilities, controls and technologies.

• Provide practical security guidance, deliver awareness initiatives and promote a positive security culture across the organisation.

The ideal candidate will have:

• Tertiary qualifications in a relevant technology discipline. Professional security certifications such as CISSP, Security+, MCSE Security or similar will be highly regarded.
• Demonstrated experience working within enterprise infrastructure and cloud environments, with a solid understanding of monitoring, logging and security operations.
• Strong understanding of information security principles, security controls, protocols and industry standards.
• Experience across identity and access management, vulnerability management, security monitoring and security governance and risk management practices.
• Proven experience using reporting, scripting, APIs, workflow automation or low-code/no-code tools to improve security assurance, compliance monitoring and operational efficiency.
• Excellent stakeholder engagement, communication and influencing skills, with the ability to build trusted relationships across technical and non-technical teams.
• Strong analytical and problem-solving skills, coupled with an ability to identify process improvement opportunities and deliver practical outcomes.
• A collaborative, proactive and commercially minded approach, with the ability to balance business needs and security risk.

During the recruitment process you may be required to complete pre-employment screening tests which include a criminal record check.

At GWF we strive to create a place where everyone belongs, everyone is valued, and everyone has equal opportunity. We encourage applications from people of all ages, nationalities, abilities, and cultures - including Aboriginal and Torres Strait Islander peoples, the LGBTQI+ community and people living with disability.

So we can get to know you in the best possible way, we're happy to adjust our recruitment process to support accessibility needs. Let us know your needs in providing a positive, barrier-free recruitment process.