Position Summary:

With the assistance of a small team, the ICT Security Manager will lead Acquire’s Information Security capabilities focusing upon the in-depth protection of Information Assets stored, processed, or transmitted by Acquire BPO.

This is a hands-on technical and administrative role, working in a complex multi tenanted environment with highly diverse requirements across numerous countries.  As a key role in Acquire BPO’s overall capabilities you will work alongside business operations, compliance, finance, and other departments in addition to technology

This role has organisation wide visibility, accountabilities and is part of the overall Risk Governance framework.

Responsibilities:

• Lead and develop a small team of Information Security Specialists
• Ensure that all technical controls adopted by the company are in-place and effective.
• Ensure all technical controls are effectively monitored, administered, and maintained.
• Ensure all process relating to the ongoing operation of each technical control are current, appropriate, and monitored for effectiveness.
• Provide advice in a consulting capacity to other aspect of the business with regard to the securing and protection of any information assets stored, processed or transmitted by Acquire.
• Exert continuous effort to further the protection of Information Assets.
• Participate in the investigation of Information Security Incidents, providing subject matter expertise and lead all technical aspects of the Investigation.
• Actively promote within the company and to our Customers ongoing awareness and opportunities for improvement in Information Security.
• Lead the efforts in retaining current Information Security certifications & standards adopted by the Company ( PCI-DSS 3.2 ( Level 1 - Service Provider) SOC-I, SOC II, HIPPA) and the adoption of new standards.
• Manage 3rd party suppliers involved in security assessment activities.
• Establish working relationships both Internally and externally.

Accountabilities:

• Effectiveness of all technical Information Security controls.
• Proactive monitoring, analysis and initiation of action based upon observed infosec events and behaviours.
• Timely implementation of any remediation activities identified.
• Meet project schedules and delivery framework requirements.
• Effective and efficient working relationship with customers, the ICT Team, and other departments within the company.
• Manage support issues and enquiries within a timely manner.

Knowledge, Skills and Experience:

• Attention to detail, problem solving, collaborative & outcome focused attitude.
• A passion for continuous improvement.  
• Experience at a detailed level securing mission critical data in a 24*7 non-stop environment.
• Ability to work within a team of highly specialised engineers, leveraging and sharing knowledge.
• In-depth foundation knowledge of communications technology ( How it Works)
• In-depth understand of data encryption standards and techniques.
• Extensive experience leveraging security analytical tools ( SIEM, testing, trace & debug ) in detecting and responding to threats.
• An understanding of both commercial and open source development environments, languages and databases.
• Detailed understanding of and experience implementing or maintain security standards such as PCI-DSS, SOC, ISO-27001, GDPR, HIPPA, NIST.  
• Experience in strategically, tactically, and operationally furthering an organisations security posture.
• A pragmatic approach to management of information across an organisation.
• Detailed understanding in assessing the value of information, the application of classifications, categorisation, treatments and security controls.

Relationships:

• ICT Engineering and support teams
• Senior members of all other departments within the company
• Customers

Join the A-Team and experience the A-Life!

What you’ll do

• Develop and maintain in depth understanding of the Commercial segment’s processes, systems, technologies, data, customers, consumers, partners.

• Act as the primary local security contact / advisor for key stakeholders within the Commercial segment.

• Advise Security Leadership in decision making for and affecting the Commercial segment.

• Analyse and manage security compliance requirements based on industry standards, national and international regulatory framework and internal policy framework.

• Proactively identify non-conformities and areas of potential improvement and facilitate development of pragmatic solutions to address issues, utilizing the security assessments and observations processes.

• Engage with clients and customers as needed to assist the business to achieve its objectives with pre and post sales activities (e.g. explain our security program, support external audits, support bids/RFP process, assist in customer communication of security incident, etc).

• Participate in BU related conferences, client facing engagement, industry forums to represent the Security program.

• Provide regular and timely reporting on the status of information security across the Commercial segment.

What experience you need 

• 5+ years experience within the security industry.

• Bachelor’s degree or an equivalent combination of education and experience required.

• Strong communication and presentation skills demonstrated by your experience in presenting and communicating at all levels within the organization and senior management. An ability to translate complex technical security concepts into business-friendly communications, especially covering cloud usage.

• Ability to independently influence others in order to achieve objectives.

• Ability to work collaboratively within a team as well as independently and autonomously, and engage stakeholders as required, to own and carry on end-to-end projects and initiatives.

• Strong ability to build and maintain trusting relationships with internal and external customers and

• always demonstrate good judgment, integrity and actively collaborates and commits to the success of others.

• Knowledge and experience of Information Security Risk and Security governance.

• A solid understanding of security best practices and international standards such as ISO2700 and PCI DSS and NIST.

• Demonstrable experience of driving operational implementation of policies and processes.  

  What could set you apart

• Previous experience as a Business Information Security Officer (BISO).

• Experience working in a matrix environment with globally diverse team members.

• Experience with Google Cloud (GCP).

• Previous experience working with external clients.

• Experience participating in IT Security audits, working with auditors..

• Experience obtaining or maintaining compliance certifications such as SOC2, PCI, ISO 27001.

• Understanding of cyber risks in the banking/ financial services sector.

• CISM, CISSP or related certification is a strong plus.

Primary Location:

Function:

Schedule:

Intuition Machines uses AI/ML to build enterprise security products. We apply our research to systems that serve hundreds of millions of people, with a team distributed around the world. You are probably familiar with our best-known product, the hCaptcha security suite. Our approach is simple: low overhead, small teams, and rapid iteration.

As a Senior Cyber Security Analyst, you will leverage your expertise in bot detection, web traffic analysis, and deep behavioral analytics to identify and investigate anomalous activities within our hCaptcha SaaS security platform.

Your primary responsibilities will include conducting advanced investigations of potential automated and human threats, analyzing complex patterns and behaviors, and developing actionable insights to enhance our security posture. Working closely with other teams, you will contribute to the continuous improvement of our AI/ML detection and response capabilities, ensuring that our platform remains resilient against evolving cybersecurity challenges.

By staying up-to-date with the latest developments in the cybersecurity landscape, you will play a pivotal role in fortifying the security of our platform, thereby protecting our Customers' data and digital assets.

What will you do:

• Monitor, identify and analyze events from a range of sources to spot threats and respond to such incidents with a sense of urgency.
• Collaborate with globally distributed teams to accomplish tasks.
• Assist in the collection of metrics to measure the efficiency of Security Operations functions.
• Audit the effectiveness of security measures to check if the systems meet the Security compliance norms.
• Assist in implementation of security policies and procedures.
• Fine-tune of the process and eventually update standard operating procedures for the team.
• Participate in various stages of incident investigations and threat hunting engagements.
• Work closely with internal company teams such as Product, Customer Success, etc.

What we are looking for:

• Exposure to web and API security, coding standards, WAFs, advanced persistent threat actors, botnets (off the shelf and custom) and attack mitigation.
• Hands-on SQL proficiency is a must-have.
• Knowledge of managing, securing and preparing production web environments with tools like Kubernetes.
• Familiar with Threat Hunting - Web/ API, web hacking, web data analysis or WAF hands-on experience.
• In-depth knowledge of the web technology and web application security field.
• Deep understanding of the cybersecurity threat landscape, and the attacker mindset.
• Experience in scripting and programming (JavaScript, Python, etc.).
• Interest in keeping up with industry trends and market demands to recommend product enhancements and new sources of intelligence.
• Demonstrated interest in working with data and metrics as applied to security.
• Be a great collaborator and communicator, stay curious and enjoy innovating. Nothing stands still in security.

Nice to Have:

• Familiarity with open source analytics and visualization tools like Grafana, Apache Superset.
• Experience red-teaming, especially developing bot-nets and whitehat hacking.
• Hands on knowledge on Web security modules and secure configuration.
• Hands-on experience and proficiency in API test automation and standardization.
• Experience and solid knowledge on computer and network security.
• Integrating security into build automation, deployment automation, test automation, SDLC orchestration, environment management, monitoring, and production.
• Mentor development teams, review pull requests, and guide evolution of the development pipeline.
• Experience with modern application packaging, deployment, containerisation, bug tracking tools and other supporting tools (Jenkins, Docker, Kubernetes, etc.).
• Familiar with ISMS (ISO/IEC 27001), SOC2, NIST Cybersecurity Framework, CIS Controls and Open Web Application Security Project.

What we offer:

• Fully remote position with flexible working hours.
• An inspiring team of colleagues spread all over the world.
• Pleasant, modern development and deployment workflows: ship early, ship often.
• High impact: lots of users, happy customers, high growth, and cutting edge R&D.
• Flat organization, direct interaction with customer teams.

We are committed to building an inclusive and diverse global workforce. We believe that the best way to learn, grow, and succeed, both as individuals and as a company, is to foster a culture that is fundamentally rooted in equality.

Join us as we transform cyber security, user privacy, and machine learning online!

About us:

Established in 2007, CDC Data Centres is Australia’s leading operator of sovereign, secure, world-class data centre facilities.

Headquartered in Canberra with multiple facilities in the ACT, NSW and New Zealand, CDC’s diversified operations provide secure data centre configurations that support co-location, containerised and hyperscale compute environments with all campuses interconnected with high-speed carrier grade networks.

At CDC we are passionate about creating an inclusive workplace that promotes and values diversity. We believe that everyone’s unique experiences enable us to deliver meaningful benefits for our people, our clients and communities. Our mission is to attract, retain and grow the world’s best data centre team.

Our people are responsive, innovative and trusted in supporting our customers. Together, we configure the landscape to meet the security, reliability, connectivity and sustainability needs for today and tomorrow.

About the role:

We are looking for a Security Compliance Specialist to lead CDC's security assurance function for the business. CDC Data Centres operates high security environments which must comply with rigorous government security and industry standards. The Security Compliance Specialist will be responsible for security assurance programs across the entire lifecycle of our data centres, including pre-planning, design, construction, commissioning, and ongoing operations.

Key responsibilities include:

•       Develop, implement, and oversee security compliance and assurance programs to ensure that all requirements are met.

•       Assist the Senior Manager, Security, Resilience and Assurance in the development of security policy.

•       Draft security compliance-related protocols, procedures and guidance material as required.

•       Assist in the development and implementation of protective security design standards for pre-construction, construction and commissioning of new data centres and infrastructure in accordance with government, industry, and customer requirements.

•       Be aware of pending changes to government, industry, and customer security requirements.

•       Work closely with the Manager, Security Operations, and other relevant stakeholders to develop quality assurance measures for effective security operations within our data centres.

•       Liaise with customers success managers, and where necessary customers directly to ensure customer security requirements are being met.

•       Liaise with consultants and certifiers in relation to security-related certification and re-certification of data centres, and where necessary provide support to initial or ongoing certification requirements.

•       Educate and train employees (including management) on security compliance related matters.

•       Collaborating with internal and external audit providers or other professional advisors as and when required.

•       Fostering a culture of continual improvement in protective security compliance within the business

•       Mentor and impart knowledge on junior staff.

•       Lead, attend and contribute to appropriate team and stakeholder meetings and committees as required and relevant to ensure excellent stakeholder engagement and communication.

•       Embrace and model CDC’s DNA and Leadership Fundamentals.

•       Provide cultural and operational team leadership.

•       Other duties as direction from time to time.

About you: 

•       3+ years working in a high security environment, preferable in state or federal government.

•       Sound understanding of either Australian Government’s Protective Security Policy Framework (PSPF) or the Defence Security Principles Framework (DSPF).

•       Experience with and direct exposure to applicable laws, regulations, and standards relevant to a large critical infrastructure provider, including Telecommunications Act 1997 (Cth), Security of Critical Infrastructure Act 2018 (Cth), Dept. Home Affairs’ Hosting Certification Framework, SOC1 Type II and SOC2 Type II controls, PCI-DSS, ISO9001, ISO14001, ISO27001 and ISO 45001.

•       Demonstrated experience in driving positive outcomes through high level communication, interpersonal ability and proactive stakeholder engagement.

Essential:

• Australian Citizenship and the ability to obtain and maintain AGSVA Security Clearance at Negative Vetting 1 level.

How to Apply:

If you are looking to own your career and take on a new challenge in a fast-growing Australian Technology company and be part of our amazing team, please submit your resume and cover letter by clicking Apply.

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.

Job Category

Job Details

About Salesforce

We’re Salesforce, the Customer Company, inspiring the future of business with AI+ Data +CRM. Leading with our core values, we help companies across every industry blaze new trails and connect with customers in a whole new way. And, we empower you to be a Trailblazer, too — driving your performance and career growth, charting new paths, and improving the state of the world. If you believe in business as the greatest platform for change and in companies doing well and doing good – you’ve come to the right place.

Role is based in Adelaide

Salesforce Professional Services focuses on delivering strategic engagements that define entrepreneurial opportunities and articulate clear plans for execution of change programs. We rely on our team’s expertise and specialisms to engage with executive-level customers to agree on specific business goals and actions to ignite the full value of Salesforce.
Our approach considers people, process, and technology — and a successful engagement includes recommendations to the business for change to support deeper, more relevant use of the Salesforce platform.

Salesforce Industries brings the most complete and innovative suite of industry-focused, customer-centric & omnichannel solutions. These industry-specific capabilities as out-of-the-box products with 3 fundamental layers:

• An extensive data model.
• A complete set of business processes and integrations.
• A full range of omnichannel experiences and apps (including sales, marketing, service, enterprise product catalog, CPQ, contract management, order management and commerce solutions).

Are you passionate about Customer Success and would you like to work at the forefront of Digital Innovation at one of the most exciting CRM Company?

 

Role Description

Our team collaborates with our Customers and Partners during the project lifecycle to share their extensive knowledge of the Salesforce.com platform and product suite. Combined with their experience in technical architecture, enterprise integration, and business solution implementation, they directly drive towards the best possible solutions. They paint a solution vision, architect the system and provide guidance during the implementation. Based on seniority they are involved in the building of solutions (configuration and coding) and/or leading diverse teams of resources in delivery or in strategic aspects.

Program Architects serve as strategic advisors and Salesforce product and platform guides to the company’s largest enterprise customers. They typically engage at C-level and drive conversations with our customer’s enterprise architects and business users equipped with standard methodologies for enterprise architecture functions such as security, performance, development process, and application governance.
 

Your Impact

Through our extended onboarding program of formal certifications, internal training, knowledge transfer, hands on experience and closely working with other Technical and Program Architects you will become a Salesforce Industries Authority at the forefront of our Architecture offerings, delivering outstanding customer success.
 

To be successful in the role you:

• Ensure scalable and standard methodology solutions to meet and exceed customer needs
• Guide the evaluation of business and technical requirements
• Build relationships with key collaborators and team members
• Act as lead architect for the overall engagement by coordinating and aligning work of multiple architects on the team
• Align with project and engagement managers to support planning and implementation in close collaboration with the customer
• Review and guide project vision and direction, implementation approach and key artefacts
• Direct early solution evaluation, including proactive management of issues and effective engagement with executives, the account team, engineering, and product management
• Direct and mentor diverse teams, such as customers, partners, and colleagues in technical delivery aspects, as well as non-technical topics such as communication strategies or executive influence
• Fuel our internal growth by identifying, leading or contributing to internal initiatives, such as innovations, building up a strategic brand, and nurturing teammates' skills by sharing knowledge.
• Where required, support pre-sales activities to position Salesforce Services
• Contribute to broader goals by becoming a citizen philanthropist and give back to our communities by joining or leading volunteering activities

Basic Requirements

• Prior experience in the Public Sector/Health industry is an advantage.
• Experience with key areas of enterprise architecture including Cloud, Integration Technologies, Master Data Management.
• Ability to analyze, design, and optimize business processes via technology and integration
• Experience in guiding customers and project members in rationalizing and deploying emerging technology for business use cases
• Work independently and as part of a distributed team and a willingness to take ownership of problems
• Rapidly learn new technologies as well as strong presentation, communication and facilitation skills
• Experience will be evaluated based on the core competencies for the role (e.g. extracurricular leadership roles, military experience, volunteer roles, work experience, etc.)
• Available to travel regionally and occasionally internationally depending on customer needs

Preferred Requirements

• A detailed understanding of Web Services, Data Modeling, Cybersecurity requirements and Enterprise application integration concepts, including experience with enterprise integration tools (ESBs and/or ETL tools), and common integration design patterns with enterprise systems (e.g. CMS, ERP, HRIS, DWH/DM)
• Ability to build and maintain key relationships with C-level / mid-level and key decision makers
• Experience of defining and delivering enterprise applications on the Salesforce Platform including coded solutions
• Salesforce Industries and Salesforce Certifications
• Affiliated to industry forums such as TM Forum (SID, eTOM).
• TOGAF and Industry Architecture qualifications.
• Agile Methodology certification such as Scaled Agile Framework.

Accommodations

If you require assistance due to a disability applying for open positions please submit a request via this Accommodations Request Form.

Posting Statement

At Salesforce we believe that the business of business is to improve the state of our world. Each of us has a responsibility to drive Equality in our communities and workplaces. We are committed to creating a workforce that reflects society through inclusive programs and initiatives such as equal pay, employee resource groups, inclusive benefits, and more. Learn more about Equality at www.equality.com and explore our company benefits at www.salesforcebenefits.com.

Salesforce is an Equal Employment Opportunity and Affirmative Action Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status. Salesforce does not accept unsolicited headhunter and agency resumes. Salesforce will not pay any third-party agency or company that does not have a signed agreement with Salesforce.

Salesforce welcomes all.