Senior Cyber Security Assurance Specialist

Harvey Norman; Strathfield Municipal Council; On-site; AUD 120,000 - 180,000; Full time

Benefits offered by this job

Salary packaging & novated leasing

Parental leave

Udemy training access

Career progression

Global brand experience

Supportive team environment

Employee discounts

Job summary

Harvey Norman invites applications for a Cyber Security Consultant to join our onsite team at the Silverwater Corporate Office. You will work with security leaders, project teams, solution architects, stakeholders and vendors to embed security-by-design across business and technology initiatives, assessing solutions and recommending practical controls.

Key activities include security and third-party risk assessments, reviewing designs, coordinating testing and guiding risk remediation.

Qualifications

• Minimum 5 years in cyber security or related area.
• Experience reviewing architectures, data flows and integrations.
• Experience with information security and third-party risk assessments.
• Knowledge of ISO 27001, NIST CSF, OWASP and IAM.
• Security concepts across cloud, networks, apps, and integrations.

Responsibilities

• Conduct information security assurance reviews across business and technology initiatives, embedding security-by-design from initiation to closure.
• Develop and communicate security requirements, standards and assurance guidance for projects and third-party engagements.
• Partner with architects, project teams, stakeholders and vendors to identify risks and recommend pragmatic controls.
• Perform third party risk assessments including review of questionnaires, certifications and audit reports.
• Review solution architectures to ensure alignment with security requirements and best practices.
• Coordinate vulnerability assessments, security configuration reviews and testing activities.
• Track and remediate identified vulnerabilities and manage risk through to formal acceptance.
• Carry out ISRA for projects and initiatives following Harvey Norman's framework.
• Document, monitor and escalate risks through governance processes.

Skills

Cyber security

Risk management

Stakeholder engagement

Security governance

Cloud security

Education

Degree in IT/CS/Cyber Security

CISSP/CISM/CRISC/CCSP (preferred)

Job description

Harvey Norman invites applications for a Cyber Security Consultant to join our onsite team at the Silverwater Corporate Office. You will work with security leaders, project teams, solution architects, stakeholders and vendors to embed security-by-design across business and technology initiatives, assessing solutions and recommending practical controls.

Key activities include security and third-party risk assessments, reviewing designs, coordinating testing and guiding risk remediation.