We are seeking a Senior Security Analyst to Manage the IT security systems, components, and processes which proactively protect the integrity, confidentially and availability of corporate business Information. Based onsite at Moorabbin, You will perform this by effectively assisting in designing, developing and implementing Enterprise Infrastructure and Applications Security strategies.

About this opportunity

Reporting to Pact's Cyber Security Manager, you will manage security posture, audits and security risk processes for BAU and all project activities. In addition, you will assist with architecture and design for security as well as assist in major incident management.

Your key responsibilities will be to:

• Help Define security policies, standards, guidelines and procedures to ensure ongoing maintenance of security
• Audit IT Infrastructure and Applications to ensure compliance of policies, standards, guidelines, procedures
• Be the focal point for ALL security related questions queries
• Assist to Manage the security education requirements for IT and Pact as a whole

Your skills and experience

To be successful in this role, you’ll have:

• Knowledge of security frameworks, standards, policies and best industry practices
• Ability to assist in analyzing, isolating and interpret business requirements/issues and translate into appropriate security and risk solutions
• Excellent verbal and written communication skills
• Ability to bridge the gap between IT and business needs
• An appreciation of IT, business and regulatory strategies in relation to IT security
• Experience in evaluation of security and technology risk issues relating to latest technologies and business solutions
• Bachelor’s degree in IS Security, IT, MIS, etc.

Control Risks has an opportunity available for an experienced Security Operations Manager to work on-site with our client, a large Sydney-based institution, on an interim basis for 3 months beginning in January 2024. There is some potential for this role to extend further.

The Security Operations Manager will have a broad remit with responsbility for managing the day-to-day security operations, including incident response, crime prevention, operations centre management, risk assessments, operational plans for events, parking and traffic management, security advice and briefings, contractor management, safety and compliance, reporting and stakeholder engagement.

The Security Operations Manager reports to the Senior Manager, Security Operations and has four direct reports.

Specific accountabilities for this role include:

• Support the Senior Manager, Security Operations in managing the contracted guarding services
• Oversee the Security Operations Centre, Concierge and Security Office functions to ensure compliance with protocols and procedures and that supporting systems are functioning as required.
• Respond to security and emergency related incidents as required to coordinate and provide specialist security advice on response strategies.
• Develop regular exercises in conjunction with the Emergency Management Team.
• Develop strong stakeholder relationships with key stakeholders that security work with on an ongoing basis.
• Develop and delivery of security and safety briefings during orientation weeks and as required thereafter.
• Ensure incidents are thoroughly investigated and reports are distributed in a timely manner to relevant stakeholders.
• Undertake risk assessments, develop operational plans, and attend planning meetings to support events, VIP visits, and scheduled activities that may impact operations.

• Relevant tertiary qualification and substantial experience managing security operations, ideally in a large complex organisation or an equivalent level of knowledge gained through any combination of education, training and experience.
• Must hold a 1A/2A NSW Security Licence.
• Excellent written and verbal communication skills, with high level of attention to detail for deliverables produced (includes strong report writing, documentation skills and ability to present effectively to a range of stakeholders).
• Proven ability to work under pressure with a high level of organisational skills to manage changing priorities and meeting deadlines.
• Be available to commence employment in early January 2024 and commit through to March 2024.

• Control Risks offers a competitively positioned compensation and benefits package that is transparent and summarised in the full job offer.
• We operate a discretionary global bonus scheme that incentivises, and rewards individuals based on company and individual performance.
• Control Risks supports hybrid working arrangements, wherever possible, that emphasise the value of in-person time together - in the office and with our clients - while continuing to support flexible and remote working.
• As an equal opportunities employer, we encourage suitably qualified applicants from a wide range of backgrounds to apply and join us and are fully committed to equal treatment, free from discrimination, of all candidates throughout our recruitment process.

Reporting to the Director of Corporate Security, the Security Analyst provides technology leadership and hands-on management of key security related IT operations and infrastructure items for the internal corporate systems.  The Information Security Analyst will ensure compliance of overall security program and policies.  Additionally, provides a cyber secure environment and security posture that fosters a high-trust relationship between Dynatrace, its employees, partners, and customers.

This role will be responsible for Threat response, Vulnerability management, executing strategies and ensuring organizational and client IT security expectations are being satisfied. There will be an expectation of collaborating with various cross organizational teams to identify the approach, deliverables, schedule, and tools to deliver within established constraints.

• Location: Australia or APAC region.
• Remote or virtual work is possible if located in the Asia Pacific region.

Responsibilities

• Examine and respond to reported security incidents and phishing attempts, determining the root cause, and escalating as needed.
• Manage and track remediation activities discovered through vulnerability management and scanning tools.  Ensure vulnerability management policy is followed.
• Become subject matter expert (SME) and make recommendations for improvements in security monitoring and compliance tools such as SIEM, Scanning Tools, Firewalls, Microsoft E5 Security Suite, etc.
• Develop and deploy pragmatic solutions, practices, and procedures to ensure Dynatrace meets internal and customer security requirements. 
• Provide operational efficiency within the security team by providing and analyzing key metrics, performance indicators and threat assessments in accordance with security policies and procedures.
• Uncover, categorize, track and close security loopholes to maintain a secure environment.
• Maintain and validate security evidence repository with required documentation for compliance with security policies and audit requests.
• Generate dashboard and scorecards to articulate the current security posture and threat level.
• Reduce time to complete customer security RFIs while improving accuracy and quality of responses.
• Obtain 100% compliance with IT security awareness policy both annually and for new hire training within the specified training windows.
• Maintain SOC2 Type 2 attestation on an annual basis, pursue and facilitate additional certifications as required by business (FedRAMP, ISO 27002:2013, etc.).
• Review Dynatrace vendor’s security posture to ensure they meet Dynatrace requirements.
• Work with third-party security vendor, ensure they have high quality responses and review all RFI responses for accuracy.  Ensure security controls and question bank are updated and accurate.