Security Specialist

Paxus; Brisbane; On-site; AUD 120,000 - 180,000; Full time

Job summary

Paxus is seeking an experienced Security Specialist - Threat Management to join its Information Security team in Brisbane, Queensland. The role focuses on coordinating assurance and threat management across the organisation, monitoring controls, managing vulnerabilities and remediation activities.

You will collaborate with technology teams, risk/compliance stakeholders and external security partners to strengthen security posture and ensure procedures and controls are effectively implemented.

Qualifications

• Experience in Information Security or Threat Management roles.
• Experience coordinating vulnerability management activities and reporting.
• Knowledge of governance, risk and compliance requirements.

Responsibilities

• Proactively monitor information security controls and identify remediation gaps.
• Coordinate User Access Reviews (UARs) and report findings.
• Drive vulnerability management: monitoring, prioritisation and remediation tracking.
• Coordinate security testing and third-party security reviews.
• Track information security findings and ensure remediation plans are followed.
• Manage exceptions to information security policies with proper approvals.
• Coordinate TPSAs with internal and external stakeholders
• Support asset security activities and remediation tracking.
• Maintain security reporting and governance processes for visibility.

Skills

Information Security

Cyber Security

Threat Management

Vulnerability Management

UARs

Security Governance

Security Testing

Stakeholder Engagement

Remediation Tracking

Job description

We are seeking an experienced Security Specialist - Threat Management to join the Information Security team of a leading organisation within the financial services and superannuation sector.

This role will focus on supporting and coordinating information security assurance and threat management activities across the organisation. You will play an important role in monitoring security controls, managing vulnerabilities, coordinating security assessments and ensuring identified risks and remediation activities are effectively tracked through to completion.

Working closely with technology teams, risk and compliance stakeholders, managed service providers and external security partners, you will help strengthen the organisation's security posture and ensure information security procedures and controls are effectively implemented.

This is a great opportunity for a security professional who enjoys working across technical security controls, governance, risk management and stakeholder engagement.

Key Responsibilities

• Proactively monitor information security technical controls, identifying gaps, weaknesses and areas requiring remediation.

• Coordinate and manage regular User Access Reviews (UARs), including preparation, stakeholder communication, monitoring and reporting.

• Drive vulnerability management activities, including monitoring, reporting, prioritisation and remediation tracking.

• Coordinate vulnerability management forums and work with key stakeholders to ensure remediation actions are completed within agreed timeframes.

• Manage and coordinate security testing activities, including independent security assessments and ongoing control testing.

• Track and manage information security findings, ensuring appropriate remediation plans are established and followed through.

• Manage exceptions to information security policies and standards, ensuring appropriate consultation, documentation and approvals.

• Coordinate Third-Party Security Assessments (TPSAs), working with internal stakeholders and external service providers to ensure assessments are completed within agreed timelines.

• Support information asset security activities, including asset classification, security assessments and remediation tracking.

• Maintain security reporting, documentation and governance processes to provide visibility of security risks and control effectiveness.

• Build and maintain strong working relationships across technology, risk, compliance and business teams.

Skills & Experience

To be successful in this role, you will ideally have:

• Proven experience in an Information Security, Cyber Security, Security Assurance or Threat Management role.

• Strong experience coordinating or managing vulnerability management activities, including identifying findings, tracking remediation and reporting.

• Experience monitoring information security controls and identifying control gaps or weaknesses.

• Knowledge of User Access Reviews (UARs), identity and access management controls and security governance.

• Experience coordinating security assessments, security testing and third-party security reviews.

• Understanding of information security policies, standards, risk management and compliance requirements.

• Experience working with technology teams, risk and compliance functions and external service providers.

• Strong stakeholder engagement and relationship management skills.

• Excellent organisational skills, with the ability to manage competing priorities and deliver activities within agreed timeframes.

• Strong communication, problem-solving and reporting skills.

• Ability to work autonomously, take ownership of activities and drive outcomes through to completion.

Desirable Experience

• Experience working within the superannuation, banking or broader financial services industry.

• Knowledge of recognised security frameworks and methodologies, particularly ISO 27001, NIST 800-53 and the NIST Cybersecurity Framework.

• Relevant industry certifications such as CISSP, CISM, SANS or qualifications in information security, risk management or project management.

• Experience working in a regulated or compliance-driven corporate environment.

Paxus values diversity and welcomes applications from Indigenous Australians, people from diverse cultural and linguistic backgrounds and people living with a disability. If you require an adjustment to the recruitment process, including the application form in an alternate format, please contact me on the above contact details.