BESIX Watpac are looking for a legal resource to join our fast paced and dynamic team on a 12-month Maternity Leave cover basis, reporting to the business unit Commercial Manager. This role will be based in our Melbourne office providing support to our Victorian and South Australian business unit. The key responsibilities of this position include:

• Ensure compliance with BESIX Watpac’s policies and procedures;
• Prepare legal and commercial benchmark reviews of tender head contracts;
• Report on legal risks in tenders and work with tender teams to address these;
• Prepare returnable schedules outlining proposed head contract departures including where required, preparing amendments to the head contract;
• Preparation and negotiation of any consultancy agreements, JV agreements, confidentiality deeds and the like required for tender submission including ensuring agreements meet the requirements of any issued RFT; and
• Review and respond to proposed departures by subcontractors and consultants to BESIX Watpac’s template suite of agreements;
• Preparation of Subcontract, Consultant and Supply Agreements to align with executed head contract terms.
• Work with construction bid lead to ensure our response on contractual and legal terms reflects the reality of risk as applicable for the relevant project and a proactive approach.
• Actively strategise and assist in driving the strategy and best course of action (legal and non-legal) to close old project issues or potential action. Understands that minimising legal and dispute related pathways is important.
• In conjunction with the Commercial Manager – Vic & SA, maintain the Important Document register and manage the issue and return of all head contract bank guarantees / insurance bonds
• In consultation with the General Manager, Group Commercial Manager and Group Contracts Manager, and consistent with the Schedule of Delegated Authority, manage the Vic & SA Construction division’s commercial issues, minor and major contract disputes including insurance matters.
• Provide general legal and commercial advice to the Vic & SA business.
• Assist with coordination and management of external legal counsel.

Position Summary:

With the assistance of a small team, the ICT Security Manager will lead Acquire’s Information Security capabilities focusing upon the in-depth protection of Information Assets stored, processed, or transmitted by Acquire BPO.

This is a hands-on technical and administrative role, working in a complex multi tenanted environment with highly diverse requirements across numerous countries.  As a key role in Acquire BPO’s overall capabilities you will work alongside business operations, compliance, finance, and other departments in addition to technology

This role has organisation wide visibility, accountabilities and is part of the overall Risk Governance framework.

Responsibilities:

• Lead and develop a small team of Information Security Specialists
• Ensure that all technical controls adopted by the company are in-place and effective.
• Ensure all technical controls are effectively monitored, administered, and maintained.
• Ensure all process relating to the ongoing operation of each technical control are current, appropriate, and monitored for effectiveness.
• Provide advice in a consulting capacity to other aspect of the business with regard to the securing and protection of any information assets stored, processed or transmitted by Acquire.
• Exert continuous effort to further the protection of Information Assets.
• Participate in the investigation of Information Security Incidents, providing subject matter expertise and lead all technical aspects of the Investigation.
• Actively promote within the company and to our Customers ongoing awareness and opportunities for improvement in Information Security.
• Lead the efforts in retaining current Information Security certifications & standards adopted by the Company ( PCI-DSS 3.2 ( Level 1 - Service Provider) SOC-I, SOC II, HIPPA) and the adoption of new standards.
• Manage 3rd party suppliers involved in security assessment activities.
• Establish working relationships both Internally and externally.

Accountabilities:

• Effectiveness of all technical Information Security controls.
• Proactive monitoring, analysis and initiation of action based upon observed infosec events and behaviours.
• Timely implementation of any remediation activities identified.
• Meet project schedules and delivery framework requirements.
• Effective and efficient working relationship with customers, the ICT Team, and other departments within the company.
• Manage support issues and enquiries within a timely manner.

Knowledge, Skills and Experience:

• Attention to detail, problem solving, collaborative & outcome focused attitude.
• A passion for continuous improvement.  
• Experience at a detailed level securing mission critical data in a 24*7 non-stop environment.
• Ability to work within a team of highly specialised engineers, leveraging and sharing knowledge.
• In-depth foundation knowledge of communications technology ( How it Works)
• In-depth understand of data encryption standards and techniques.
• Extensive experience leveraging security analytical tools ( SIEM, testing, trace & debug ) in detecting and responding to threats.
• An understanding of both commercial and open source development environments, languages and databases.
• Detailed understanding of and experience implementing or maintain security standards such as PCI-DSS, SOC, ISO-27001, GDPR, HIPPA, NIST.  
• Experience in strategically, tactically, and operationally furthering an organisations security posture.
• A pragmatic approach to management of information across an organisation.
• Detailed understanding in assessing the value of information, the application of classifications, categorisation, treatments and security controls.

Relationships:

• ICT Engineering and support teams
• Senior members of all other departments within the company
• Customers

Join the A-Team and experience the A-Life!

What you’ll do

• Develop and maintain in depth understanding of the Commercial segment’s processes, systems, technologies, data, customers, consumers, partners.

• Act as the primary local security contact / advisor for key stakeholders within the Commercial segment.

• Advise Security Leadership in decision making for and affecting the Commercial segment.

• Analyse and manage security compliance requirements based on industry standards, national and international regulatory framework and internal policy framework.

• Proactively identify non-conformities and areas of potential improvement and facilitate development of pragmatic solutions to address issues, utilizing the security assessments and observations processes.

• Engage with clients and customers as needed to assist the business to achieve its objectives with pre and post sales activities (e.g. explain our security program, support external audits, support bids/RFP process, assist in customer communication of security incident, etc).

• Participate in BU related conferences, client facing engagement, industry forums to represent the Security program.

• Provide regular and timely reporting on the status of information security across the Commercial segment.

What experience you need 

• 5+ years experience within the security industry.

• Bachelor’s degree or an equivalent combination of education and experience required.

• Strong communication and presentation skills demonstrated by your experience in presenting and communicating at all levels within the organization and senior management. An ability to translate complex technical security concepts into business-friendly communications, especially covering cloud usage.

• Ability to independently influence others in order to achieve objectives.

• Ability to work collaboratively within a team as well as independently and autonomously, and engage stakeholders as required, to own and carry on end-to-end projects and initiatives.

• Strong ability to build and maintain trusting relationships with internal and external customers and

• always demonstrate good judgment, integrity and actively collaborates and commits to the success of others.

• Knowledge and experience of Information Security Risk and Security governance.

• A solid understanding of security best practices and international standards such as ISO2700 and PCI DSS and NIST.

• Demonstrable experience of driving operational implementation of policies and processes.  

  What could set you apart

• Previous experience as a Business Information Security Officer (BISO).

• Experience working in a matrix environment with globally diverse team members.

• Experience with Google Cloud (GCP).

• Previous experience working with external clients.

• Experience participating in IT Security audits, working with auditors..

• Experience obtaining or maintaining compliance certifications such as SOC2, PCI, ISO 27001.

• Understanding of cyber risks in the banking/ financial services sector.

• CISM, CISSP or related certification is a strong plus.

Primary Location:

Function:

Schedule: