Are you passionate about securing cloud and on-premises environments? Do you have a passion for learning and enthusiasm for Security? At AFCA, the Australian Financial Complaints Authority, we are on the search for a Junior Security Administrator to join our Information Services team. In this role, you will play a vital part in ensuring the security practices of AFCA's infrastructure align with best practices and regulatory requirements. If you thrive in a fast-paced environment and have a keen eye for security, we want to hear from you!

This position would suit someone who is dedicated to growing a career within cyber-security and at the start of their journey, looking to join a progressive, supportive and purposeful organisation. 

Typically in this role you will:

• Maintain the security ticket queue in Freshdesk, which serves as an escalation point from AFCA’s primary helpdesk
• Assist in developing and improving security controls across AFCA.
• Support AFCA’s data loss prevention program by responding to suspected potential incidents from Netskope and Purview. 
• Assist with the delivery of security better practice in relation to AFCA IT systems
• Provide governance over the effectiveness of security configuration and maintenance of AFCA IT systems.
• Delivery of security training and messaging to AFCA staff.  
• Provide technical assistance with incident response investigations.  
• Supporting projects and the project management functions as required.

About Us

Established in 1988, Rest is one of Australia’s largest profit-to-member superannuation funds.

We support nearly two million members, with around $75 billion of funds under management and are recognised as a responsible investment leader*. We believe when members understand and engage with their super, they’re more likely to get a better retirement outcome.

Everything we do at Rest is underpinned by our values and behaviours, we want to Be Daring, Keep it Simple, Take Action and Have Grit. To put it simply we want our people to thrive and love the work they do.

About the Job

• 12 Month Fixed Term Contract
• Exciting, high profile role
• Market leader in Flex and Hybrid working

The Cloud Security & DevOps Engineer role is responsible for acting as an AWS platform subject matter expert within the Rest Engineering team.

You will be embedded in all AWS platform related projects to design, implement and support cloud architecture needed to deliver business goals. The Cloud & DevOps Engineer will make sure all platform architecture is designed with DR, BCP and high availability in mind and will own the execution of our annual DR testing schedule.

The Cloud Security & DevOps Engineer will also provide oversight, guidance, and support to other technical teams within Rest, data, and engineering to manage their platforms, CI/CD pipelines and assist in the management and oversight of our chosen vendors with respect to AWS.

Cloud Security Focus:

The Cloud Security & DevOps Engineer will tackle some challenging and diverse security remediation projects. The role involves extensive work in AWS, designing and reviewing complex architectures, and implementing advanced security measures. You will the chance to work on anything from standard AWS services to more unconventional setups.

Experience with cloud services, particularly AWS, and your ability to handle multifaceted security challenges would be invaluable. A significant part of the job also involves responding to dynamic security situations. This includes risk assessments of different architectures and managing responses to security incidents, security vulnerabilities using various tools (CNAAP / SEIM). We will be integrating Cloud Posture Management into our pipeline, so insights on automating responses and maintaining these tools would greatly benefit the team.

Key Accountabilities/Responsibilities

• Develop and standardise the usage of automation to provision and manage cloud resources within the CI/CD pipeline, using AWS CDK, CloudFormation, scripting, or other tools.
• Work alongside Solution Architects and other technical stakeholders to design and architect scalable, reliable, and secure cloud solutions, using native AWS services (S3, ECS, EC2, RDS, Dynamo, etc.).
• Review and enforce practices from our vendor DevOps resources to develop infrastructure as code using tools like AWS CloudFormation or CDK to automate resource provisioning.
• Review our current CI/CD pipelines to automate the deployment and updates to AWS resources. Work with platform teams to define and implement best practices in our CI/CD pipelines for each platform (API and Digital) to define and create reusable components.
• Define and implement security best practices, including IAM roles, policies, permissions to ensure secure access to AWS resources.
• Analyse monitoring data to identify performance bottlenecks.
• Own the BCP and DR capabilities within the AWS domain and work collaboratively with the business and vendors to schedule and conduct annual DR tests for all AWS based infrastructure.
• Investigate and resolve technical issues related to AWS/Azure infrastructure, networking, and applications. Provide technical support to development teams and stakeholders, troubleshooting and resolving issues promptly.
• Leading and mentoring other engineers with your laser focus on automation, cloud, and DevOps engineering techniques, to design and implement secure, simple, and impactful solutions
• Collaborate with cross-functional teams to drive successful cloud initiatives.

Cloud Security Focus:

• Identify and resolve any security related errors in AWS.
• Identify and correct security misconfigurations in AWS accounts.
• Completing cloud security analysis to detect and respond to events; Perform log analysis to detect and respond to security events.
• Automate security controls where possible.
• Participate in security assessments of networks, systems and applications delivered internally and externally.
• Manage and, where possible, automate security controls and reporting (vulnerability management, system hardening, logging, and monitoring, system integrity, honeypots, source code reviews).
• Review and recommend technical and non-technical improvements to system and network security controls.
• Perform Endpoint Detection and Response (EDR) through CNAAP / SEIM based tools.
• Conversations with Cloud, Engineering, TechOps & InfoSec teams, utilise security knowledge to reduce risk.
• Contribute and drive Cyber Security roadmap; Provide consultation on the deployment of cloud security solutions within projects, aligning them with the secure cloud architecture and identifying areas for improvement to accommodate immediate or future needs.
• Collaborate with product managers, product owners, and peers to facilitate the adoption of cloud security solutions and services.

We are looking for an experienced Security Officer to manage the gatehouse at our Mars site in Ballarat.  The role has a significant amount of interaction and face to face dealings with contractors, truck drivers and couriers requiring strong customer service skills and the ability to ensure compliance to site entry requirements. 

This role is permanent full time role.  Your rotating roster consists of 4 days on, 4 days off, 4 night shifts, 4 days off.  

Who are we looking for?  

You will need relevant valid security licence for Victoria, and a current first aid certificate.  If you have previous experience managing security duties at a gate house including maintaining and populating spreadsheets, data entry and an understanding of security and CCTV systems.  We want to hear from you now!

• Confidence building and maintaining relationships with internal and external stakeholders
• Ensuring premises are always secured and safe for staff and visitors
• Receipt of deliveries, data entry
• Weigh bridge operations
• Ensuring compliance is always adhered to
• Providing guidance, observing, reporting, and responding to any incidents
• Excellent organisational skills
• Outstanding communication and interpersonal abilities
• High attention to detail
• Extensive customer service experience

Why choose Sodexo?  

 Sodexo is a people business, employing over 400,000 people worldwide and thousands in Australia. Our employees, who personify Sodexo's unique values of Service Spirit, Team Spirit and Spirit of Progress, are our greatest asset through their commitment and dedication.    

Working with Sodexo is more than a job; it’s a chance to be part of something greater because we believe our everyday actions have a big impact. With us, you belong in a company that allows you to act with purpose and thrive in your own way. We are always looking for people to join our team and help us create a lasting impact on individuals, society, and the planet. 

At Sodexo, we are a proud Equal Opportunity Employer and encourage applications from all applicants regardless of age, race, sex, ethnicity, religion and beliefs and people with disabilities.    

We offer a competitive salary, many development opportunities and an outstanding benefits and recognition program!    

How to apply?  

If you are interested in joining the Sodexo team and meet the minimum criteria outlined above, please apply with your resume detailing relevant employment experience and availability.   

One of our friendly recruiters will contact shortlisted candidates for a phone interview. This will also be your opportunity to ask any questions you may have.  

Submit your application today and become part of the Sodexo family!   

About Us

Established in 1988, Rest is one of Australia’s largest profit-to-member superannuation funds.

We support nearly two million members, with around $75 billion of funds under management and are recognised as a responsible investment leader*. We believe when members understand and engage with their super, they’re more likely to get a better retirement outcome.

Everything we do at Rest is underpinned by our values and behaviours, we want to Be Daring, Keep it Simple, Take Action and Have Grit. To put it simply we want our people to thrive and love the work they do.

About the Job

The Information Security Cloud Analyst is responsible for safeguarding Rest’s cloud-based systems encompassing a broad range of activities including evaluating and mitigating risks, formulating cloud-specific security strategies, continuously watching for cyber threats, ensuring regulatory compliance, and responding to security incidents.

Additionally, the Information Security Cloud Analyst will create secure cloud designs and guardrails, educate employees on best practices, assess third-party vendors for security risks, maintain cloud security policies, and manage various cloud security technologies.

Key Responsibilities

• Design, deliver & monitor security controls in cloud platforms, with primary focus on AWS.
• Provide strategic security and risk guidance for cloud security and related projects, including the evaluation and recommendation of technical controls and platform architectural designs.
• Operate, enhance and evolve cloud-native and third-party SaaS cloud security tooling to assure security posture of the cloud platform meets internal and regulatory compliance requirements.
• Prioritise & ensure remediation of vulnerabilities identified through cloud security standards, policies & tools.
• Produce technical solutions and standard operating procedures for Security Operating Centre (SOC) to triage and respond efficiently to security events.
• Deliver knowledge transfer sessions across the business to uplift Cloud Security awareness to technical and non-technical stakeholders.
• Advise workload owners, developers & business partners to improve cloud security posture across cloud infrastructure, application & software delivery.
• Follow strict information security processes, plans and protocols in managing the life cycle of issues and incidents, which may include collaborating with internal stakeholders, vendors or third parties.
• Support the uplift of cyber incident management capabilities collaborating with information security governance, risk & operations
• Promote and reinforce security standards, policies and procedures ensuring ongoing compliance and, where gaps exist, develop plans for remediation.
• Participate in audits as required, collating, and providing information including closing out of audit issues.

• 7 month fixed term contract 
• Highly varied role - work with purpose
• Hybrid working as standard

About Us

Established in 1988, Rest is one of Australia’s largest profit-to-member superannuation funds.

We support nearly two million members, with around $75 billion of funds under management and are recognised as a responsible investment leader*. We believe when members understand and engage with their super, they’re more likely to get a better retirement outcome.

Everything we do at Rest is underpinned by our values and behaviours, we want to Be Daring, Keep it Simple, Take Action and Have Grit. To put it simply we want our people to thrive and love the work they do.

About the Job

Working with the Group Legal Counsel and other senior members of the legal team, the role is responsible for managing legal matters relating to Rest to ensure appropriate management of Rest’s legal rights, duties and compliance.

Regulatory:

• Advise and provide guidance to business lines on legal and regulatory obligations relevant to the Trustee and Fund, including those arising under the Corporations Act, Superannuation Industry (Supervision) Act, other related legislation and relevant regulatory standards and guidance
• Review product disclosures, promotional materials and other member communications
• Advise on incidents and other regulatory matters, and assist with liaising with regulators where required
• Provide ongoing legal support to regulatory projects as required

Commercial:

• Manage the timely review and negotiation of contracts and legal documents

General:

• Support senior members of the Legal team in managing litigated matters and disputes, including liaising with Rest’s external legal advisers
• Assist with providing legal training to business lines

AECOM has an exciting opportunity for an admitted lawyer with up to 4 years PQE experience to join our Australia and New Zealand (ANZ) Legal Team based in Melbourne. You will be advising on a wide range of transactions for a large multinational engineering consultancy firm, including drafting and negotiating project contracts and related contract documentation, managing complex disputes, and handling a wide variety of general corporate matters, including in relation to probity and conflicts management, regulatory and compliance issues, software as a service (SaaS), intellectual property and insurance matters.

AECOM works on some of the largest and most significant infrastructure projects around Australia and globally, including design and construct projects, alliances and public private partnerships. As a lawyer in the VSAT region (and member of the broader ANZ Legal Team) you will assume an integral role in AECOM delivering these projects and achieving its corporate vision of delivering a better world.

You will primarily be responsible for:

• Drafting, reviewing, and negotiating AECOM’s project contracts (including consultancy services agreements, alliance, tender services, SaaS, PM and EPCM agreements) and related ancillary documentation (including confidentiality, and JV agreements, probity deeds, and IP licenses) for a wide range of construction and engineering projects, primarily across AECOM’s VSAT region and also across ANZ (and beyond) when required.
• Providing ad-hoc legal advice regarding AECOM’s project pursuits, including in relation to bid qualification and departure statements, probity and procurement, deal structuring, conflicts management and other collateral matters arising in connection with its varied business transactions.
• Assisting with the preparation of internal project approvals;
• Engaging with internal clients (including senior management and tender teams) during the delivery phase of projects, assisting with the preparation of subcontracts and reviewing EOT, variation, and other contractual claims, and proactively managing, avoiding, and resolving project-related disputes.
• Managing claims and disputes, including judicial and administrative litigation, and drafting or settling internal and external communications with law firms, clients, and other stakeholders.