Due to a healthy project pipeline, we are looking for a Senior ICT & Security Engineer to join our team to work on a variety of projects including defence, health, education, sports infrastructure, aviation and justice.

What will a day in this role look like:

• Deliver technical design and documentation of ICT and Security systems ranging from structured cabling systems, active networks, WLAN, IPTV, audio-visual systems, video conferencing, CCTV, electronic access control, intruder alarm, intercom, perimeter intrusion detection and Type 1A security alarm systems.
• Work collaboratively, with a national team on project costing, client engagement, contractor management and bids / tenders.
• Use your multi-disciplinary project experience and communication skills to mentor and guide junior engineers in the business on a variety of projects.
• Liaise with clients on site investigations and providing them with cost effective, technically sound solutions on their projects.

• New role working with an industry leading team
• Deliver in a purpose led forward thinking organisation
• Hybrid working as standard

About Us

Established in 1988, Rest is one of Australia’s largest profit-to-member superannuation funds.

We support nearly two million members, with around $75 billion of funds under management and are recognised as a responsible investment leader*. We believe when members understand and engage with their super, they’re more likely to get a better retirement outcome.

Everything we do at Rest is underpinned by our values and behaviours, we want to Be Daring, Keep it Simple, Take Action and Have Grit. To put it simply we want our people to thrive and love the work they do.

About the Job

A new role working closely with the Head of Public Policy, you will have the opportunity to deliver on your extensive policy knowledge and expertise. 

The Senior Manager, Public Policy seeks to positively influence public policy in support of the best financial interests of Rest members, by working both internally and externally with a range of senior stakeholders.  

Development of public policy positions

• Working with the Head of Public Policy, work collaboratively with senior leaders and subject-matter experts across Rest to develop relevant public policy positions to enhance member investment returns.   
• This may include working across policy areas as diverse as superannuation policy, regulation of investments and taxation settings, and thematics as broad as Climate Change and Net Zero transition, clean and affordable energy, agriculture, social and affordable housing, decent work, gender equity and social and economic inequality.  
• Work to ensure policy positions are integrated, consistent, robust, aligned, evidence-based and clearly documented in Rest’s Policy Position Register.
• Prepare high-quality submissions to government on issues that are important to Rest and its members, or consult to others within Rest who are preparing such submissions.
• Prepare high-quality policy documents, white papers, position papers, presentations, briefings, etc, informed by insights and evidence which demonstrates a close connection to Rest members’ best financial interests.
• Collaborating with relevant internal teams, maintain a comprehensive and up-to-date view of policy positions held by key stakeholders and associated groups including peak industry bodies.

Supporting public policy and advocacy agenda

• Working with the Head of Public Policy, work collaboratively with senior leaders and subject-matter experts across Rest to support the development of policy advocacy strategies to further Rest members’ best financial interests, including through preparation of research, meeting briefs, advice and other strategic inputs, and through external engagement representing Rest with relevant government and industry stakeholders.
• Work to support the development of proactive advocacy strategies for policy associated with Rest’s prioritised Sustainable Development Goals of Gender Equality, Affordable and Clean Energy, Decent Work and Economic Growth, Reduced Inequalities and Climate Action.  

Advisory and Consulting

• Provide advisory and consulting support across Rest Investments to assist in the creation, development and application of policy positions and advocacy in Rest members’ best financial interests.
• Liaise and advise as required with the Executive and other senior leaders and specialists across Rest.
• Work collaboratively as necessary with the Communications and Community team, Responsible Investments & Sustainability team, investment asset class teams and others as required on policy-related responses related to member and other stakeholder enquiries.

About Us

Established in 1988, Rest is one of Australia’s largest profit-to-member superannuation funds.

We support nearly two million members, with around $75 billion of funds under management and are recognised as a responsible investment leader*. We believe when members understand and engage with their super, they’re more likely to get a better retirement outcome.

Everything we do at Rest is underpinned by our values and behaviours, we want to Be Daring, Keep it Simple, Take Action and Have Grit. To put it simply we want our people to thrive and love the work they do.

About the Job

• 12 Month Fixed Term Contract
• Exciting, high profile role
• Market leader in Flex and Hybrid working

The Cloud Security & DevOps Engineer role is responsible for acting as an AWS platform subject matter expert within the Rest Engineering team.

You will be embedded in all AWS platform related projects to design, implement and support cloud architecture needed to deliver business goals. The Cloud & DevOps Engineer will make sure all platform architecture is designed with DR, BCP and high availability in mind and will own the execution of our annual DR testing schedule.

The Cloud Security & DevOps Engineer will also provide oversight, guidance, and support to other technical teams within Rest, data, and engineering to manage their platforms, CI/CD pipelines and assist in the management and oversight of our chosen vendors with respect to AWS.

Cloud Security Focus:

The Cloud Security & DevOps Engineer will tackle some challenging and diverse security remediation projects. The role involves extensive work in AWS, designing and reviewing complex architectures, and implementing advanced security measures. You will the chance to work on anything from standard AWS services to more unconventional setups.

Experience with cloud services, particularly AWS, and your ability to handle multifaceted security challenges would be invaluable. A significant part of the job also involves responding to dynamic security situations. This includes risk assessments of different architectures and managing responses to security incidents, security vulnerabilities using various tools (CNAAP / SEIM). We will be integrating Cloud Posture Management into our pipeline, so insights on automating responses and maintaining these tools would greatly benefit the team.

Key Accountabilities/Responsibilities

• Develop and standardise the usage of automation to provision and manage cloud resources within the CI/CD pipeline, using AWS CDK, CloudFormation, scripting, or other tools.
• Work alongside Solution Architects and other technical stakeholders to design and architect scalable, reliable, and secure cloud solutions, using native AWS services (S3, ECS, EC2, RDS, Dynamo, etc.).
• Review and enforce practices from our vendor DevOps resources to develop infrastructure as code using tools like AWS CloudFormation or CDK to automate resource provisioning.
• Review our current CI/CD pipelines to automate the deployment and updates to AWS resources. Work with platform teams to define and implement best practices in our CI/CD pipelines for each platform (API and Digital) to define and create reusable components.
• Define and implement security best practices, including IAM roles, policies, permissions to ensure secure access to AWS resources.
• Analyse monitoring data to identify performance bottlenecks.
• Own the BCP and DR capabilities within the AWS domain and work collaboratively with the business and vendors to schedule and conduct annual DR tests for all AWS based infrastructure.
• Investigate and resolve technical issues related to AWS/Azure infrastructure, networking, and applications. Provide technical support to development teams and stakeholders, troubleshooting and resolving issues promptly.
• Leading and mentoring other engineers with your laser focus on automation, cloud, and DevOps engineering techniques, to design and implement secure, simple, and impactful solutions
• Collaborate with cross-functional teams to drive successful cloud initiatives.

Cloud Security Focus:

• Identify and resolve any security related errors in AWS.
• Identify and correct security misconfigurations in AWS accounts.
• Completing cloud security analysis to detect and respond to events; Perform log analysis to detect and respond to security events.
• Automate security controls where possible.
• Participate in security assessments of networks, systems and applications delivered internally and externally.
• Manage and, where possible, automate security controls and reporting (vulnerability management, system hardening, logging, and monitoring, system integrity, honeypots, source code reviews).
• Review and recommend technical and non-technical improvements to system and network security controls.
• Perform Endpoint Detection and Response (EDR) through CNAAP / SEIM based tools.
• Conversations with Cloud, Engineering, TechOps & InfoSec teams, utilise security knowledge to reduce risk.
• Contribute and drive Cyber Security roadmap; Provide consultation on the deployment of cloud security solutions within projects, aligning them with the secure cloud architecture and identifying areas for improvement to accommodate immediate or future needs.
• Collaborate with product managers, product owners, and peers to facilitate the adoption of cloud security solutions and services.

• 7 month fixed term contract 
• Highly varied role - work with purpose
• Hybrid working as standard

About Us

Established in 1988, Rest is one of Australia’s largest profit-to-member superannuation funds.

We support nearly two million members, with around $75 billion of funds under management and are recognised as a responsible investment leader*. We believe when members understand and engage with their super, they’re more likely to get a better retirement outcome.

Everything we do at Rest is underpinned by our values and behaviours, we want to Be Daring, Keep it Simple, Take Action and Have Grit. To put it simply we want our people to thrive and love the work they do.

About the Job

Working with the Group Legal Counsel and other senior members of the legal team, the role is responsible for managing legal matters relating to Rest to ensure appropriate management of Rest’s legal rights, duties and compliance.

Regulatory:

• Advise and provide guidance to business lines on legal and regulatory obligations relevant to the Trustee and Fund, including those arising under the Corporations Act, Superannuation Industry (Supervision) Act, other related legislation and relevant regulatory standards and guidance
• Review product disclosures, promotional materials and other member communications
• Advise on incidents and other regulatory matters, and assist with liaising with regulators where required
• Provide ongoing legal support to regulatory projects as required

Commercial:

• Manage the timely review and negotiation of contracts and legal documents

General:

• Support senior members of the Legal team in managing litigated matters and disputes, including liaising with Rest’s external legal advisers
• Assist with providing legal training to business lines

About Us

Established in 1988, Rest is one of Australia’s largest profit-to-member superannuation funds.

We support nearly two million members, with around $75 billion of funds under management and are recognised as a responsible investment leader*. We believe when members understand and engage with their super, they’re more likely to get a better retirement outcome.

Everything we do at Rest is underpinned by our values and behaviours, we want to Be Daring, Keep it Simple, Take Action and Have Grit. To put it simply we want our people to thrive and love the work they do.

About the Job

The Information Security Cloud Analyst is responsible for safeguarding Rest’s cloud-based systems encompassing a broad range of activities including evaluating and mitigating risks, formulating cloud-specific security strategies, continuously watching for cyber threats, ensuring regulatory compliance, and responding to security incidents.

Additionally, the Information Security Cloud Analyst will create secure cloud designs and guardrails, educate employees on best practices, assess third-party vendors for security risks, maintain cloud security policies, and manage various cloud security technologies.

Key Responsibilities

• Design, deliver & monitor security controls in cloud platforms, with primary focus on AWS.
• Provide strategic security and risk guidance for cloud security and related projects, including the evaluation and recommendation of technical controls and platform architectural designs.
• Operate, enhance and evolve cloud-native and third-party SaaS cloud security tooling to assure security posture of the cloud platform meets internal and regulatory compliance requirements.
• Prioritise & ensure remediation of vulnerabilities identified through cloud security standards, policies & tools.
• Produce technical solutions and standard operating procedures for Security Operating Centre (SOC) to triage and respond efficiently to security events.
• Deliver knowledge transfer sessions across the business to uplift Cloud Security awareness to technical and non-technical stakeholders.
• Advise workload owners, developers & business partners to improve cloud security posture across cloud infrastructure, application & software delivery.
• Follow strict information security processes, plans and protocols in managing the life cycle of issues and incidents, which may include collaborating with internal stakeholders, vendors or third parties.
• Support the uplift of cyber incident management capabilities collaborating with information security governance, risk & operations
• Promote and reinforce security standards, policies and procedures ensuring ongoing compliance and, where gaps exist, develop plans for remediation.
• Participate in audits as required, collating, and providing information including closing out of audit issues.