Security Engineer - Assurance

George Weston Foods Limited; Sydney; On-site; AUD 120,000 - 180,000; Full time

Job summary

George Weston Foods Limited is seeking a Security Engineer – Assurance to help protect our enterprise infrastructure and cloud environments. You will translate policies into practical assurance activities and drive security improvements. You will develop metrics, assess risks, and coordinate with stakeholders to ensure controls remain effective.

A strong generalist with assurance and risk mindset is ideal. Join a team supporting multiple brands and technologies, with a focus on pragmatic,

Qualifications

• Bachelor-level or higher in a technology-related field with security emphasis.
• Professional security certifications such as CISSP, Security+, MCSE Security or similar highly regarded.
• Experience with enterprise infrastructure, cloud environments and monitoring.

Responsibilities

• Interpret security policies and translate them into practical assurance activities.
• Develop security metrics, dashboards and reporting for control effectiveness.
• Analyse security data to identify trends and remediation opportunities.
• Drive automation of assurance, compliance validation and evidence collection.
• Own third-party security risk management, supplier assessments and remediation.
• Communicate risks and remediation recommendations across the organisation.
• Support security improvement initiatives and new capability implementation.
• Provide practical security guidance and promote a positive security culture.

Skills

Security assurance

Risk management

Security monitoring

Automation scripting

Stakeholder engagement

Education

Tertiary qualification in a relevant technology discipline

Job description

Select how often (in days) to receive an alert:

George Weston Foods makes some of Australia and New Zealand’s favourite and most innovative products! Chances are that one of our iconic brands is sitting on your table, packed in your lunchbox or resting in your pantry right now. Join the team and be part of one of our iconic brands like Tip Top, Abbotts Village Bakery, Burgen, Golden, DON, KR Castlemaine and Yumi’s.

Key Responsibilities

As a Security Engineer – Assurance, you will play a key role in supporting security assurance, third-party security reviews, implementation of security standards, security projects and broader security operations activities. Working closely with business and technology stakeholders, you will help ensure security controls remain effective, security risks are appropriately managed and organisational security capabilities continue to mature. This role is ideally suited to a strong security generalist with an assurance and risk mindset who can deliver practical security outcomes across multiple technology domains.

On a day-to-day basis, you will:

• Interpret security policies, standards and control requirements and translate them into practical security assurance activities.
• Develop security metrics, dashboards and reporting to provide visibility of control effectiveness and risk.
• Analyse information from security and IT platforms to identify trends, risks and opportunities for improvement.
• Drive automation of security assurance, compliance validation, reporting and evidence collection activities to improve efficiency and quality outcomes.
• Own and continuously improve the third-party security risk management process, including supplier security assessments and remediation activities.
• Identify, document and communicate security risks, control gaps and remediation recommendations across the organisation.
• Support the delivery of security improvement initiatives, strategic projects and the implementation of new security capabilities, controls and technologies.
• Provide practical security guidance, deliver awareness initiatives and promote a positive security culture across the organisation.

About You

The ideal candidate will have:

• Tertiary qualifications in a relevant technology discipline. Professional security certifications such as CISSP, Security+, MCSE Security or similar will be highly regarded.
• Demonstrated experience working within enterprise infrastructure and cloud environments, with a solid understanding of monitoring, logging and security operations.
• Strong understanding of information security principles, security controls, protocols and industry standards.
• Experience across identity and access management, vulnerability management, security monitoring and security governance and risk management practices.
• Proven experience using reporting, scripting, APIs, workflow automation or low-code/no-code tools to improve security assurance, compliance monitoring and operational efficiency.
• Excellent stakeholder engagement, communication and influencing skills, with the ability to build trusted relationships across technical and non-technical teams.
• Strong analytical and problem-solving skills, coupled with an ability to identify process improvement opportunities and deliver practical outcomes.
• A collaborative, proactive and commercially minded approach, with the ability to balance business needs and security risk.

At GWF we strive to create a place where everyone belongs, everyone is valued, and everyone has equal opportunity. We encourage applications from people of all ages, nationalities, abilities, and cultures – including Aboriginal and Torres Strait Islander peoples, the LGBTQI+ community and people living with disability.

So we can get to know you in the best possible way, we're happy to adjust our recruitment process to support accessibility needs. Let us know your needs in providing a positive, barrier-free recruitment process via email to [e-mail].