BESIX Watpac are looking for a legal resource to join our fast paced and dynamic team on a 12-month Maternity Leave cover basis, reporting to the business unit Commercial Manager. This role will be based in our Melbourne office providing support to our Victorian and South Australian business unit. The key responsibilities of this position include:

• Ensure compliance with BESIX Watpac’s policies and procedures;
• Prepare legal and commercial benchmark reviews of tender head contracts;
• Report on legal risks in tenders and work with tender teams to address these;
• Prepare returnable schedules outlining proposed head contract departures including where required, preparing amendments to the head contract;
• Preparation and negotiation of any consultancy agreements, JV agreements, confidentiality deeds and the like required for tender submission including ensuring agreements meet the requirements of any issued RFT; and
• Review and respond to proposed departures by subcontractors and consultants to BESIX Watpac’s template suite of agreements;
• Preparation of Subcontract, Consultant and Supply Agreements to align with executed head contract terms.
• Work with construction bid lead to ensure our response on contractual and legal terms reflects the reality of risk as applicable for the relevant project and a proactive approach.
• Actively strategise and assist in driving the strategy and best course of action (legal and non-legal) to close old project issues or potential action. Understands that minimising legal and dispute related pathways is important.
• In conjunction with the Commercial Manager – Vic & SA, maintain the Important Document register and manage the issue and return of all head contract bank guarantees / insurance bonds
• In consultation with the General Manager, Group Commercial Manager and Group Contracts Manager, and consistent with the Schedule of Delegated Authority, manage the Vic & SA Construction division’s commercial issues, minor and major contract disputes including insurance matters.
• Provide general legal and commercial advice to the Vic & SA business.
• Assist with coordination and management of external legal counsel.

Position Summary:

With the assistance of a small team, the ICT Security Manager will lead Acquire’s Information Security capabilities focusing upon the in-depth protection of Information Assets stored, processed, or transmitted by Acquire BPO.

This is a hands-on technical and administrative role, working in a complex multi tenanted environment with highly diverse requirements across numerous countries.  As a key role in Acquire BPO’s overall capabilities you will work alongside business operations, compliance, finance, and other departments in addition to technology

This role has organisation wide visibility, accountabilities and is part of the overall Risk Governance framework.

Responsibilities:

• Lead and develop a small team of Information Security Specialists
• Ensure that all technical controls adopted by the company are in-place and effective.
• Ensure all technical controls are effectively monitored, administered, and maintained.
• Ensure all process relating to the ongoing operation of each technical control are current, appropriate, and monitored for effectiveness.
• Provide advice in a consulting capacity to other aspect of the business with regard to the securing and protection of any information assets stored, processed or transmitted by Acquire.
• Exert continuous effort to further the protection of Information Assets.
• Participate in the investigation of Information Security Incidents, providing subject matter expertise and lead all technical aspects of the Investigation.
• Actively promote within the company and to our Customers ongoing awareness and opportunities for improvement in Information Security.
• Lead the efforts in retaining current Information Security certifications & standards adopted by the Company ( PCI-DSS 3.2 ( Level 1 - Service Provider) SOC-I, SOC II, HIPPA) and the adoption of new standards.
• Manage 3rd party suppliers involved in security assessment activities.
• Establish working relationships both Internally and externally.

Accountabilities:

• Effectiveness of all technical Information Security controls.
• Proactive monitoring, analysis and initiation of action based upon observed infosec events and behaviours.
• Timely implementation of any remediation activities identified.
• Meet project schedules and delivery framework requirements.
• Effective and efficient working relationship with customers, the ICT Team, and other departments within the company.
• Manage support issues and enquiries within a timely manner.

Knowledge, Skills and Experience:

• Attention to detail, problem solving, collaborative & outcome focused attitude.
• A passion for continuous improvement.  
• Experience at a detailed level securing mission critical data in a 24*7 non-stop environment.
• Ability to work within a team of highly specialised engineers, leveraging and sharing knowledge.
• In-depth foundation knowledge of communications technology ( How it Works)
• In-depth understand of data encryption standards and techniques.
• Extensive experience leveraging security analytical tools ( SIEM, testing, trace & debug ) in detecting and responding to threats.
• An understanding of both commercial and open source development environments, languages and databases.
• Detailed understanding of and experience implementing or maintain security standards such as PCI-DSS, SOC, ISO-27001, GDPR, HIPPA, NIST.  
• Experience in strategically, tactically, and operationally furthering an organisations security posture.
• A pragmatic approach to management of information across an organisation.
• Detailed understanding in assessing the value of information, the application of classifications, categorisation, treatments and security controls.

Relationships:

• ICT Engineering and support teams
• Senior members of all other departments within the company
• Customers

Join the A-Team and experience the A-Life!

What you’ll do

• Develop and maintain in depth understanding of the Commercial segment’s processes, systems, technologies, data, customers, consumers, partners.

• Act as the primary local security contact / advisor for key stakeholders within the Commercial segment.

• Advise Security Leadership in decision making for and affecting the Commercial segment.

• Analyse and manage security compliance requirements based on industry standards, national and international regulatory framework and internal policy framework.

• Proactively identify non-conformities and areas of potential improvement and facilitate development of pragmatic solutions to address issues, utilizing the security assessments and observations processes.

• Engage with clients and customers as needed to assist the business to achieve its objectives with pre and post sales activities (e.g. explain our security program, support external audits, support bids/RFP process, assist in customer communication of security incident, etc).

• Participate in BU related conferences, client facing engagement, industry forums to represent the Security program.

• Provide regular and timely reporting on the status of information security across the Commercial segment.

What experience you need 

• 5+ years experience within the security industry.

• Bachelor’s degree or an equivalent combination of education and experience required.

• Strong communication and presentation skills demonstrated by your experience in presenting and communicating at all levels within the organization and senior management. An ability to translate complex technical security concepts into business-friendly communications, especially covering cloud usage.

• Ability to independently influence others in order to achieve objectives.

• Ability to work collaboratively within a team as well as independently and autonomously, and engage stakeholders as required, to own and carry on end-to-end projects and initiatives.

• Strong ability to build and maintain trusting relationships with internal and external customers and

• always demonstrate good judgment, integrity and actively collaborates and commits to the success of others.

• Knowledge and experience of Information Security Risk and Security governance.

• A solid understanding of security best practices and international standards such as ISO2700 and PCI DSS and NIST.

• Demonstrable experience of driving operational implementation of policies and processes.  

  What could set you apart

• Previous experience as a Business Information Security Officer (BISO).

• Experience working in a matrix environment with globally diverse team members.

• Experience with Google Cloud (GCP).

• Previous experience working with external clients.

• Experience participating in IT Security audits, working with auditors..

• Experience obtaining or maintaining compliance certifications such as SOC2, PCI, ISO 27001.

• Understanding of cyber risks in the banking/ financial services sector.

• CISM, CISSP or related certification is a strong plus.

Primary Location:

Function:

Schedule:

Infosys Consulting is the worldwide management and IT consultancy unit of the Infosys Group (NYSE: INFY), a global advisor to leading companies for strategy, process engineering and technology-enabled transformation programs. We partner with clients to design and implement customized solutions to address their complex business challenges, and to help them in a post-modern ERP world. By combining innovative and human-centric approaches with the latest technological advances, we enable organizations to reimagine their future and create sustainable and lasting business value. A pioneer in breaking down the barriers between strategy and execution, Infosys Consulting delivers superior business value to its clients by advising them on strategy and process optimisation as well as IT-enabled transformation.To find out how we go beyond the expected to deliver the exceptional, visit us at www.infosysconsultinginsights.com

Infosys Consulting - a real consultancy for real consultants.      

We have an opportunity available for Senior Consultant - Cyber Security - GRC to join the Infosys Consulting team. In this newly created role, you will provide subject matter expertise to our clients.

We are seeking a highly experienced Governance, Risk, and Compliance (GRC) to provide guidance and support for our ongoing cyber uplift program.

 As a senior Cyber Security GRC Consultant, you will work closely with the team of Cybersecurity Governance Risk and Compliance as well as the Cyber Program Director to support the maturation of the orgnaisation's cybersecurity GRC capabilities.

Key areas of responsibilities include:

• Ongoing cyber security standards development
• Support for transition to new enterprise GRC system (including risk management, control framework development, policy and standards management)
• Act as trusted adviser for AEMO Head of GRC to provide advisory support as well as execution capability and thought leadership for GRC uplift
• Support for ongoing implementation of cyber security reporting and metrics
• Providing ongoing guidance on Critical Infrastructure Legislation compliance strategy (SOCI)
• Act as an advocate for GRC maturation across the Digital stream through engagement and communication with stakeholders outside the Cybersecurity team.

Skills:

Analytical Skills: Ability to articulate complex analytical requirements and findings in common non-technical terms.

Collaborative and social: Must be able to communicate well with a wide variety of people.

Exceptional Communication skills.

Strong Problem-Solving Skills: See the world from unique viewpoints and provide lightbulb moments with clients.

Relationship Management and managing relationships with clients and internal stakeholders

We offer you great opportunities within a dynamically growing consulting organization. You will elaborate and deliver best practice solutions and will be able to further develop your skills. At Infosys Consulting you will discover a truly global culture that embraces diversity at all levels, working with highly dedicated and motivated colleagues, a cooperative work environment and interesting training opportunities.

Please keep reading….

At Viva Energy we are dedicated to building a diverse and inclusive workplace, so if you’re excited about the opportunity but your past experience doesn’t align perfectly with the job description, we still encourage you to apply. Your skills and experience may just be the right match for this role or other opportunities!
A range of benefits to help you to Grow, Belong and Thrive

• Challenging roles and meaningful work to help you grow your career
• A leading approach to flexible working. 
• Access to a range of best in class wellness initiatives.
• Celebrate you with an extra day of leave for your birthday.
• Generous and flexible parental leave - accrue full time super until your child turns five.
• A competitive package including performance incentives
• 25% fuel discount
• We pay your permanent and total disability and death cover insurance.