Senior Security Officer — Secure-by-Design Leader

Qantas Group; Melbourne; Sur place; AUD 180 000 - 280 000; Plein temps

Avantages offerts par ce poste

Staff travel benefit from Day one

We love to travel

Flexible leave options

Rewards through partnerships

Wellbeing program

Résumé du poste

Qantas Group is seeking a Senior Business Information Security Officer (SBISO) to lead cyber risk management and drive a secure-by-design culture across Jetstar and the Group. You will partner with business and technology teams to implement mature cyber protections, advise on projects, and shape security governance across large-scale environments.

You will own cyber maturity, manage security architecture, and influence senior leaders with strong stakeholder engagement and project management

Qualifications

• 10+ years’ experience in cyber security, information security or IT audit, assurance, risk assessment and remediation management.
• Relevant tertiary qualification in Information Security, Computer Science, Engineering, Information Systems, Business, Commerce or Law.
• Industry certifications such as CISSP, CCNA, CCIE, CRISC, CSA, CISA or equivalent.

Responsabilités

• Own end-to-end cyber security maturity for the allocated business area (Jetstar Group) aligning with enterprise security requirements and policies.
• Lead secure-by-design implementations for projects, changes and activities presenting cyber risk.
• Build trusted relationships with technology, business and stakeholders to support cyber engagement.
• Drive Group-wide security synergies with Group cyber teams and services.
• Develop security governance, risk management and assurance deliverables and support governance forums.

Connaissances

Cyber security governance

Stakeholder management

Security architecture

Project management

Security risk assessment

Formation

Information Security or related degree

Outils

NIST/ISO 27001

COBIT

Description du poste

Founded in the Queensland outback in 1920, Qantas has grown to be Australia’s largest regional, domestic, and international airline. Qantas has a range of subsidiary businesses that support the overall operations of the Group. The Qantas Group’s main business is the transportation of customers and freight using two complementary airline brands — Qantas and Jetstar — operating regional, domestic, and international services.

• Great opportunity to influence business and cyber security outcomes for Qantas Group through a secure-by-design approach
• Staff travel benefit from Day one!
• Full-time permanent role based in Melbourne

The Qantas Group strives to have a strong cyber safety culture and capability with cyber managed as a business risk. This includes the implementation and sustainability of control measures to protect the confidentiality, integrity and availability of the IT Environment and the data and information contained within it.

We are seeking a Senior Business Information Security Officer (SBISO), to serve as trusted advisor and partner to the business and Technology domains and is responsible for leading cultural change across the Group, in particular Jetstar, so that cyber is managed as a business risk and not an IT or Technology risk. The SBISO is responsible for leading the implementation of a ‘secure-by-design’ approach to business and technology projects, changes and other activities which present cyber risk to the Group’s business.

To achieve a strong cyber security culture and effective cyber risk management, the SBISO is responsible for strategically planning the appropriate level of cyber protection for its business area as well as provides services as a subject matter expert including but not limited to consulting on projects and business as usual at all levels of network, IT security and enterprise architecture as well as broader cyber security risk.

Reporting to the Head of Cyber Business Protect within the Qantas Group Cyber team, the SBISO coordinates and provides multi-disciplinary knowledge, skills, and experience in influencing business, security architecture, security governance/assurance risk management outcomes as well as responding to internal customer queries in support of business programs.

Key Responsibilities include:

• Owning end-to-end cyber security maturity for the allocated business area in this case Jetstar Group, ensuring alignment with enterprise security requirements, policies and Qantas Group cyber policies and standards.
• Partner closely with business owners, application owners and Technology Domain leads to implement a ‘secure-by-design’ approach to ensure all projects, changes and other activities are secure before the ‘go-live’.
• Build trusted relationships with technology, business and internal stakeholders to support effective cyber engagement.
• Works with Group cyber teams and services to drive consistency, collaboration and Group-wide security synergies.
• Supporting cyber security and data protection best practices, including development of process documents, policies and secure-by-design guidance.
• Provide security architecture, solutioning expertise and operational analysis for critical solutions in large-scale environments.
• Supports critical technology projects and represents cyber security at governance forums.

You’ll have:

• 10+ years’ experience in cyber security, information security or IT audit, assurance, risk assessment and remediation management ideally including security architecture.
• Relevant tertiary qualification desirable, such as Information Security, Computer Science, Engineering, Information Systems, Business, Commerce or Law.
• Industry certifications desirable, including CISSP, CCNA, CCIE, CRISC, CSA, CISA or equivalent.
• Strong knowledge of privacy, data protection and security regulations, including PCI DSS and relevant compliance obligations.
• Experience applying security and risk frameworks such as NIST, ISO 27001, COBIT and related standards.
• Strong enterprise security architecture capability, including security consulting for projects, business teams and large-scale environments.
• Knowledge across cloud security, encryption, application security, database security, AI and mobile application security.
• Knowledge of and keeping on top of emergent Tech, AI and security impacts
• Strong Multitasking ability, Agile ability and approach, ability to manage multiple projects at different stages
• Excellent stakeholder management, communication, facilitation, negotiation and influencing skills with senior leaders and business teams.
• Strong organisational, project management and technical writing skills, including experience with vendor, contract and SLA reviews.

Why Qantas?

If you’re successful in your application, you’ll join a team where creativity and passion are encouraged. Our people come together to allow us to dream big and deliver successfully.

There are many different opportunities across our team, which means you’ll be able to grow both personally and professionally at Qantas. Your development is a priority for us – so that you can maintain the high standards our customers have come to expect and can continue to develop over time. You’ll be supported from day 1 with on the job training and coaching as well as our formal training opportunities. While you may start in this role, we’ve got a great track record of supporting our people to take their career in so many different directions, the destinations are endless.

The Qantas employee benefits program offers amazing benefits that extend well beyond travel.

• We love to travel: Enjoy heavily discounted air travel within Australia and across the globe, both for you and your family and friends, as well as exclusive deals on accommodation and holidays.
• We have flexible leave options:Make use of leave and flexible working opportunities including 18 weeks paid parental leave and the option to purchase additional paid leave for eligible employees.
• We’ll give you access to thousands of rewards:Through our partnerships we can offer you discounts across shopping, food and wine, insurance, health and wellbeing, leisure and entertainment.You can also take advantage of our salary packaging program including motor vehicles, eligible portable electronic devices and professional memberships.
• We’ll support your wellbeing:Whether it’s learning to better support your own and others’ mental health, our interactive wellbeing app or your very own tailored nutrition plan.

Applications will close by the 29th of September