What you will be doing:
- Provide expert advice on complex information security matters within areas of specialisation.
- Identify, investigate and resolve complex technical issues relating to security technologies.
- Conduct in-depth analysis of information security issues with stakeholders and recommend solutions that meet business and technical requirements.
- Analyse and improve information security processes to optimise operations.
- Interpret management information, system logs and reports to identify and correct deviations from best practices.
- Identify selection criteria for new information security products and participate in their implementation and handover.
- Monitor information security environments to ensure compliance with established standards.
- Create, maintain and review information security standards, processes and procedures.
- Review project documentation and contribute to the implementation of security requirements.
- Identify and mitigate information security risks.
- Implement and gain experience across multiple information security technologies.
- Log, submit and independently implement low-, medium- and high-risk security changes.
- Oversee security changes and verify their successful implementation.
- Provide guidance and supervision to administrators and other analysts during implementations and changes.
- Keep up to date with information security policies, standards, procedures, regulatory requirements and industry developments.
- Participate in research and development relating to information security technologies.
- Participate in proof-of-technology and proof-of-concept initiatives.
- Assess proposed changes to identify shortcomings and potential risks.
- Build and maintain relationships with stakeholders to support knowledge sharing and the adoption of new products and solutions.
- Work with internal networks and stakeholders to manage and resolve security incidents.
- Provide technical mentoring, coaching and guidance to team members.
- Share knowledge, industry trends and technical expertise to support team development.
- Contribute to training curricula and the development of career stream and role requirements.
- Participate in information security industry forums and present technical papers.
- Provide input into vendor negotiations for new and existing technologies and services.
- Recommend cost-effective solutions that meet information security requirements and remain within budget.
- Identify opportunities to improve business processes, systems and operational models.
- Ensure the stability and availability of assigned security environments, including providing on-demand support outside normal working hours when required.
- Complete timesheets and claims accurately and on time.
- Contribute to business strategy, organisational culture initiatives and continuous professional development.
What we are looking for:
- Advanced Diploma or Bachelor's degree in a relevant field.
- 10–15 years of experience in an IT environment, including at least two years in a senior role and three to five years specialising in an information security technology.
- Strong expertise in information security technologies and the ability to resolve complex technical issues.
- Experience implementing, monitoring and maintaining information security technologies.
- Experience identifying, assessing and mitigating information security risks.
- Knowledge of information security policies, standards, procedures and regulatory requirements.
- Experience reviewing and improving information security processes and procedures.
- Experience interpreting system logs, management information and technical reports.
- Experience managing security changes and overseeing successful implementations.
- Ability to provide technical guidance, coaching and mentoring to administrators and information security analysts.
- Strong stakeholder engagement and collaboration skills.
- Experience participating in research and development, proof-of-technology and proof-of-concept initiatives.
- Knowledge of governance, risk and controls.
- Knowledge of information security threats and attack vectors.
- Understanding of TCP/IP, relevant operating systems and system development life cycle (SDLC).
- Knowledge of vendor management principles and project management fundamentals.
- Strong analytical, decision-making, problem-solving and business writing skills.
- Ability to work independently, manage competing priorities and make informed technical decisions.
- Ability to recommend cost-effective solutions that meet business and information security requirements.
- Willingness to provide on-demand support outside normal working hours when required.
Essential Certifications:
- CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), or a relevant information security certification.
Please note that most of our positions are remote; however, candidates should reside within travelling distance of the client site, as the working arrangements may change depending on business requirements.