Security Manager

Kinexus; Sydney; On-site; AUD 140,000 - 190,000; Full time

Job summary

Kinexus in Sydney seeks an experienced Security Manager to lead facility security, defence personnel vetting processes and DI/ICT security management. You will guide risk mitigation, training and governance across the organisation, ensuring compliance with the ISM, DSPF, PSPF and related government requirements.

You will manage DISP membership, oversee accreditation documentation and collaborate with leadership to address current and future security needs. An active NV1 clearance is required.

Qualifications

• Demonstrated experience in defence ICT security, with focus on CLASSIFIED ICT environments.
• Sound knowledge of DISP requirements and security best practice.
• Must have Defence Security Principles Framework (DSPF) experience.
• Demonstrated integrity and ability to build relationships across the business.
• Traceable history implementing PSPF
• Experience with Defence and facilities security requirements.

Responsibilities

• Lead facility security operations and manage relationships with security providers.
• Own site-level security requirements and obtain approvals from government bodies (ASD).
• Partner with local leadership to address personnel and facility security needs.
• Maintain ICT accreditation documentation for CLASSIFIED networks and ISM updates.
• Guide compliance activities across networks including audits and reporting on remediation.
• Manage DISP membership and broader security requirements.
• Provide security training and staff education across the business.
• Apply ISM, DSPF and PSPF frameworks to daily security governance.
• Cover cyber risk, data loss prevention, identity and access management, governance, and investigations.

Skills

Defence ICT security

DISP requirements

DSPF knowledge

PSPF knowledge

Staff training

Threat management

Security governance

ERP/CRM systems

MS Office proficiency

Stakeholder relations

Tools

MS Office

ERP/CRM systems

Job description

Our client is seeking an experience Security Manager to join their team in Sydney. Candidates will need experience in the defence and personnel security vetting processes, manage employee application processes, maintain defence security clarification for the business not limited to site accreditation and certification manage digital information and digital security management.

Candidates will be required to manage facility security as well as threat assessments to ensure the needs are monitored and up-to-date. They'll be also responsible support staff and lead the induction of new employees and educate all staff on updates.

The Role

• Lead facility security operations, including the relationship with the security services provider (ADT), ensuring all levels of the organisation understand and follow security policies
• Own site-level security requirements, including obtaining necessary approvals from government bodies such as ASD
• Partner with local leadership to understand and address current and future personnel and facility security needs
• Maintain and update ICT accreditation documentation for CLASSIFIED networks in line with the ISM, reviewing and actioning changes as the ISM is updated
• Guide completion of compliance activities across all networks, including audits, reviews, tracking and reporting on remediation
• Manage Defence Industry Security Program (DISP) membership and broader security requirements
• Provide security training, staff education sessions, and general information security support across the business
• Apply working knowledge of the Information Security Manual (ISM), Defence Security Principles Framework (DSPF) and Protective Security Policy Framework (PSPF)
• Cover responsibilities spanning security operations, cyber risk and intelligence, data loss prevention, security architecture, identity and access management, program management, investigations/forensics, and governance

Requirements

• Demonstrated experience in defence ICT security, with a particular focus on CLASSIFIED ICT environments
• Sound knowledge of DISP requirements and security best practice
• Must have Defence Security Principals Framework (DSPF) experience
• A traceable history in implementing Protective Security Policy Framework (PSPF)
• A track record in implementing State and National security legislation
• Experienced across Defence and facilities security requirements
• Manage DISP membership
• Staff training in security and threat management
• SAP, systems, and reporting experience
• Proficiency with an ERP/CRM (MS Office) systems
• Demonstrated integrity and build relationships across the business
• Must hold an active NV1 issued clearance, minimum.

This is a complex role, it requires someone who has experience in working with technology companies in a secure environment. Candidates will need to have a traceable history in working with DISP in managing staff and training, managing clearance processes for employees as well as the facility more broadly.