Position Summary:

With the assistance of a small team, the ICT Security Manager will lead Acquire’s Information Security capabilities focusing upon the in-depth protection of Information Assets stored, processed, or transmitted by Acquire BPO.

This is a hands-on technical and administrative role, working in a complex multi tenanted environment with highly diverse requirements across numerous countries.  As a key role in Acquire BPO’s overall capabilities you will work alongside business operations, compliance, finance, and other departments in addition to technology

This role has organisation wide visibility, accountabilities and is part of the overall Risk Governance framework.

Responsibilities:

• Lead and develop a small team of Information Security Specialists
• Ensure that all technical controls adopted by the company are in-place and effective.
• Ensure all technical controls are effectively monitored, administered, and maintained.
• Ensure all process relating to the ongoing operation of each technical control are current, appropriate, and monitored for effectiveness.
• Provide advice in a consulting capacity to other aspect of the business with regard to the securing and protection of any information assets stored, processed or transmitted by Acquire.
• Exert continuous effort to further the protection of Information Assets.
• Participate in the investigation of Information Security Incidents, providing subject matter expertise and lead all technical aspects of the Investigation.
• Actively promote within the company and to our Customers ongoing awareness and opportunities for improvement in Information Security.
• Lead the efforts in retaining current Information Security certifications & standards adopted by the Company ( PCI-DSS 3.2 ( Level 1 - Service Provider) SOC-I, SOC II, HIPPA) and the adoption of new standards.
• Manage 3rd party suppliers involved in security assessment activities.
• Establish working relationships both Internally and externally.

Accountabilities:

• Effectiveness of all technical Information Security controls.
• Proactive monitoring, analysis and initiation of action based upon observed infosec events and behaviours.
• Timely implementation of any remediation activities identified.
• Meet project schedules and delivery framework requirements.
• Effective and efficient working relationship with customers, the ICT Team, and other departments within the company.
• Manage support issues and enquiries within a timely manner.

Knowledge, Skills and Experience:

• Attention to detail, problem solving, collaborative & outcome focused attitude.
• A passion for continuous improvement.  
• Experience at a detailed level securing mission critical data in a 24*7 non-stop environment.
• Ability to work within a team of highly specialised engineers, leveraging and sharing knowledge.
• In-depth foundation knowledge of communications technology ( How it Works)
• In-depth understand of data encryption standards and techniques.
• Extensive experience leveraging security analytical tools ( SIEM, testing, trace & debug ) in detecting and responding to threats.
• An understanding of both commercial and open source development environments, languages and databases.
• Detailed understanding of and experience implementing or maintain security standards such as PCI-DSS, SOC, ISO-27001, GDPR, HIPPA, NIST.  
• Experience in strategically, tactically, and operationally furthering an organisations security posture.
• A pragmatic approach to management of information across an organisation.
• Detailed understanding in assessing the value of information, the application of classifications, categorisation, treatments and security controls.

Relationships:

• ICT Engineering and support teams
• Senior members of all other departments within the company
• Customers

Join the A-Team and experience the A-Life!

Infosys Consulting is the worldwide management and IT consultancy unit of the Infosys Group (NYSE: INFY), a global advisor to leading companies for strategy, process engineering and technology-enabled transformation programs. We partner with clients to design and implement customized solutions to address their complex business challenges, and to help them in a post-modern ERP world. By combining innovative and human-centric approaches with the latest technological advances, we enable organizations to reimagine their future and create sustainable and lasting business value. A pioneer in breaking down the barriers between strategy and execution, Infosys Consulting delivers superior business value to its clients by advising them on strategy and process optimisation as well as IT-enabled transformation.To find out how we go beyond the expected to deliver the exceptional, visit us at www.infosysconsultinginsights.com

Infosys Consulting - a real consultancy for real consultants.      

We have an opportunity available for Senior Consultant - Cyber Security - GRC to join the Infosys Consulting team. In this newly created role, you will provide subject matter expertise to our clients.

We are seeking a highly experienced Governance, Risk, and Compliance (GRC) to provide guidance and support for our ongoing cyber uplift program.

 As a senior Cyber Security GRC Consultant, you will work closely with the team of Cybersecurity Governance Risk and Compliance as well as the Cyber Program Director to support the maturation of the orgnaisation's cybersecurity GRC capabilities.

Key areas of responsibilities include:

• Ongoing cyber security standards development
• Support for transition to new enterprise GRC system (including risk management, control framework development, policy and standards management)
• Act as trusted adviser for AEMO Head of GRC to provide advisory support as well as execution capability and thought leadership for GRC uplift
• Support for ongoing implementation of cyber security reporting and metrics
• Providing ongoing guidance on Critical Infrastructure Legislation compliance strategy (SOCI)
• Act as an advocate for GRC maturation across the Digital stream through engagement and communication with stakeholders outside the Cybersecurity team.

Skills:

Analytical Skills: Ability to articulate complex analytical requirements and findings in common non-technical terms.

Collaborative and social: Must be able to communicate well with a wide variety of people.

Exceptional Communication skills.

Strong Problem-Solving Skills: See the world from unique viewpoints and provide lightbulb moments with clients.

Relationship Management and managing relationships with clients and internal stakeholders

We offer you great opportunities within a dynamically growing consulting organization. You will elaborate and deliver best practice solutions and will be able to further develop your skills. At Infosys Consulting you will discover a truly global culture that embraces diversity at all levels, working with highly dedicated and motivated colleagues, a cooperative work environment and interesting training opportunities.

Please keep reading….

At Viva Energy we are dedicated to building a diverse and inclusive workplace, so if you’re excited about the opportunity but your past experience doesn’t align perfectly with the job description, we still encourage you to apply. Your skills and experience may just be the right match for this role or other opportunities!
A range of benefits to help you to Grow, Belong and Thrive

• Challenging roles and meaningful work to help you grow your career
• A leading approach to flexible working. 
• Access to a range of best in class wellness initiatives.
• Celebrate you with an extra day of leave for your birthday.
• Generous and flexible parental leave - accrue full time super until your child turns five.
• A competitive package including performance incentives
• 25% fuel discount
• We pay your permanent and total disability and death cover insurance.

The Senior Network and Security Engineer will provide technical leadership and expertise to design and deliver customer solutions using the latest technologies in a hands-on project delivery role.

As a Senior Network and Security Engineer, you will:

• Bring your project delivery experience and passion for the latest technology
• Take ownership of your projects and work closely with key stakeholders
• Enjoy keeping up to date with the latest network and security technologies
• Thrive on being involved in a range of different projects concurrently and enjoy building strong relationships with key internal and external stakeholders

Accountabilities:

• Interpret client requirements through the hosting of design workshops
• Produce detailed design documentation and the deployment of network and security solutions
• Continuous learning for current and emerging technologies to support Logicalis product offerings through self-paced, instructor lead training and vendor certifications
• Work with and mentor junior staff

Essential Skills:

• Demonstrated experience in project delivery of complex Network and Security solutions
• Demonstrated experience working across SD-WAN, WAN, LAN and Wi-Fi solutions including Cisco, Aruba and Fortinet
• Demonstrated experience working with security solutions including NGFW, SASE across Cisco, Fortinet and Palo Alto
• Current vendor certifications which may include Cisco, Palo Alto, Fortinet and Aruba
• Strong communication, presentation and documentation skills with the ability to articulate to technical and non-technical audiences

Desirable Skills:

• Experience with or exposure to Public Cloud, NAC, SIEM
• Data Centre network design and deployment
• Network automation experience

As a valued member of ‘Logicalis Australia’ you will enjoy several benefits, such as;

• Supportive team environment: Confidential pulse checks tell us we are known for being "Unselfish with knowledge", "Flexible and Diverse" and "Give a shout-out and there will always be help"
• Pick your own adventure: Our people have moved from Help-desk to Cloud-Engineering. Admin to Project/Program Management. Project Management to Product Development. If something interests you, we’ll fund you to learn it, so you can become it!
• Breadth of experience and purpose: People here can have an idea, make a plan, and see it through. Our people enjoy genuinely impacting change and controlling their professional success.
• Flexible, modern, working arrangements: Flexible model that allows for productive remote working and in person collaboration. #LI-Hybrid

*Do I need to meet all the requirements to apply?*

No. Studies by several different sources have shown that, on average, men will apply for a job if they meet 60% of the requirements. In contrast, women, non-binary, and neurodivergent people aim for closer to 90%! Please don’t let us miss out on everything you have to offer just because there is some upskilling to do. We can teach the specifics of the job. What we can’t teach is Character – ie Confidence, Capability, Curiosity

About us

We are Logicalis, Architects of Change™. We assist organizations in succeeding in a digital-first world by harnessing our collective technology expertise. Our lifecycle services, including cloud, connectivity, collaboration, and security, optimize operations, reduce risk, and empower employees. As a global tech service provider, we also deliver managed services to provide real-time visibility and insights across clients' digital ecosystems. With 7000+ employees in 27 countries, we help 10,000+ clients globally create sustainable outcomes through technology.

For people living with disabilities, chronic illnesses, or neurodiversity; adjustments and support will be made available to create a more comfortably aligned application process. If you need any specific accommodations (tools, time, etc.), and feel comfortable disclosing this, please let us know and we’ll be glad to facilitate.

What a day in this role will look like:

• Lead the ICT and Security design and delivery on projects, responsible for project costing, client engagement and briefing, development of technical solutions, documentation of design and specifications, and liaising with contractors during construction.
• Technical design of ICT and Security systems including communications passive infrastructure (structured cabling systems), IT Network (LAN, WAN, VoIP, Wireless), and electronic security systems, including CCTV, Electronic Access Control, intruder alarm, perimeter intrusion detection, Type 1A Security Alarm Systems, and Cyber Security.
• Collaborate with the local Buildings and Places team and national AECOM Technology Advisory group on a diverse range of projects in sectors including health, education, aviation, defence and justice.
• Mentor and provide technical guidance to junior team members and build your own career through professional development and training.

We are seeking a Senior Security Analyst to Manage the IT security systems, components, and processes which proactively protect the integrity, confidentially and availability of corporate business Information. Based onsite at Moorabbin, You will perform this by effectively assisting in designing, developing and implementing Enterprise Infrastructure and Applications Security strategies.

About this opportunity

Reporting to Pact's Cyber Security Manager, you will manage security posture, audits and security risk processes for BAU and all project activities. In addition, you will assist with architecture and design for security as well as assist in major incident management.

Your key responsibilities will be to:

• Help Define security policies, standards, guidelines and procedures to ensure ongoing maintenance of security
• Audit IT Infrastructure and Applications to ensure compliance of policies, standards, guidelines, procedures
• Be the focal point for ALL security related questions queries
• Assist to Manage the security education requirements for IT and Pact as a whole

Your skills and experience

To be successful in this role, you’ll have:

• Knowledge of security frameworks, standards, policies and best industry practices
• Ability to assist in analyzing, isolating and interpret business requirements/issues and translate into appropriate security and risk solutions
• Excellent verbal and written communication skills
• Ability to bridge the gap between IT and business needs
• An appreciation of IT, business and regulatory strategies in relation to IT security
• Experience in evaluation of security and technology risk issues relating to latest technologies and business solutions
• Bachelor’s degree in IS Security, IT, MIS, etc.

Reporting to the Director of Corporate Security, the Security Analyst provides technology leadership and hands-on management of key security related IT operations and infrastructure items for the internal corporate systems.  The Information Security Analyst will ensure compliance of overall security program and policies.  Additionally, provides a cyber secure environment and security posture that fosters a high-trust relationship between Dynatrace, its employees, partners, and customers.

This role will be responsible for Threat response, Vulnerability management, executing strategies and ensuring organizational and client IT security expectations are being satisfied. There will be an expectation of collaborating with various cross organizational teams to identify the approach, deliverables, schedule, and tools to deliver within established constraints.

• Location: Australia or APAC region.
• Remote or virtual work is possible if located in the Asia Pacific region.

Responsibilities

• Examine and respond to reported security incidents and phishing attempts, determining the root cause, and escalating as needed.
• Manage and track remediation activities discovered through vulnerability management and scanning tools.  Ensure vulnerability management policy is followed.
• Become subject matter expert (SME) and make recommendations for improvements in security monitoring and compliance tools such as SIEM, Scanning Tools, Firewalls, Microsoft E5 Security Suite, etc.
• Develop and deploy pragmatic solutions, practices, and procedures to ensure Dynatrace meets internal and customer security requirements. 
• Provide operational efficiency within the security team by providing and analyzing key metrics, performance indicators and threat assessments in accordance with security policies and procedures.
• Uncover, categorize, track and close security loopholes to maintain a secure environment.
• Maintain and validate security evidence repository with required documentation for compliance with security policies and audit requests.
• Generate dashboard and scorecards to articulate the current security posture and threat level.
• Reduce time to complete customer security RFIs while improving accuracy and quality of responses.
• Obtain 100% compliance with IT security awareness policy both annually and for new hire training within the specified training windows.
• Maintain SOC2 Type 2 attestation on an annual basis, pursue and facilitate additional certifications as required by business (FedRAMP, ISO 27002:2013, etc.).
• Review Dynatrace vendor’s security posture to ensure they meet Dynatrace requirements.
• Work with third-party security vendor, ensure they have high quality responses and review all RFI responses for accuracy.  Ensure security controls and question bank are updated and accurate.  

We’re Littlepay - a growing fintech headquartered in Melbourne with operations in the UK, EU, LATAM, USA, and more recently, Australia. Our payments platform enables our customers to pay for public transport using any payment card, mobile wallet, or wearable device. Processing over 20 million transactions in 13 countries and continuing to expand globally, we’re proud to move more people through better payment experiences.

Our Littlepay values:

• Trust and be trustworthy
• Embrace challenge
• Solve problems, together
• Deliver with speed and agility
• Be candid and kind

About the opportunity

Reporting to the Information Security Manager, the System Security Engineer will be responsible for improving the safety and security at Littlepay. You will be working with the security team to make sure our enterprise tools are secure and well operates.

Day to day, you’ll:

• Manage and secure our various mobile devices using MDM
• Manage mobile device deployments and configurations
• Securely provision and configure mobile devices
• Monitor and track mobile device activity
• Manage our Identity and Access Management system. Applying policies and security controls
• Secure the applications and collaboration tools used by the organisation
• Stay up to date with latest security technology and trends.
• Identify and assess security threats and vulnerabilities
• Respond to security incidents

How we work

• Cloud first. Zero on-premise product infrastructure
• PCI compliant and working towards ISO 27001
• Apple Macs everywhere; Windows laptops hiding in some corners
• We use Google Workspace, Slack, Notion, Jira (and many more SaaS tools)

You are a highly motivated and experienced System Security Engineer (we’re looking for at least 3 years’ experience ) with a strong knowledge of security principles and practices.

The successful applicant need not arrive with all of the required skills and knowledge from day 1, as we’ve built learning into our team practice with a day per week set aside for personal and professional growth. We’re open to many different skillsets, and candidates who can speak to any of these topics are folks we’d like to chat with:

• Experience with security technologies and tools
• Experience in building and maintaining security systems
• Experience in managing identity provider
• Experience working with MDM
• Experience managing Google workspace
• Knowledge of network security, operating systems security, and application security
• Strong understanding of security principles and best practices
• Ability to work independently and as part of a team

You'll join a diverse, ego-less and empathetic team that strives for high social cohesion, have the opportunity to learn about the payment processing ecosystem, and be involved in the provision of critical services that impact millions of daily commuters - all within the tight-knit environment of an agile scale-up.

Our recruitment process

If you’ve been shortlisted for the role, you’ll first have a chat with our Talent team, who will set up an interview if the stars align. A short workplace preferences questionnaire will also be sent to help us learn more about the way you prefer to work. Following a successful first interview, you’ll be invited to meet with a second set of Littlepay folks and participate in the final stage before being presented with an offer.

If you have any questions regarding the recruitment process or if you require any accommodations for any stage in the interview process, please don’t hesitate to let us know. Additionally, if you don’t meet all of the criteria (we know that some underrepresented groups tend to avoid applying if they don’t), please still apply. We really enjoy meeting people who might bring a fresh perspective on a problem we need to solve!

Ultimately, being part of our small but mighty team means you'll have the opportunity to learn about micropayments, and have a hand in the provision of services that impact millions of people. You’ll help us deliver on our revolutionary product roadmap and help scale our platform as we continue to expand across the globe.

We love to look after our people. At Littlepay, you'll be part of an inclusive and diverse team that celebrates the differences and unique gifts we each bring to work.

You’ll have access to:

• A high trust working environment, with access to cloud collaboration tools like Notion, Slack, Miro, Google Workspace, and Jira to help us work together effectively
• Paid professional development (including conferences, courses, learning subscriptions, etc.)
• Harrison Assessments - our talent management provider that facilitates continuous professional development
• A variety of flexible leave options (including annual, personal, volunteer, parental, grandparental, gender affirmation, and more)
• Superannuation contributions on all paid parental leave payments
• A company-wide paid day off
• Our flexible public holiday program
• Flexible (hybrid) working conditions
• Wellbeing support- including a free School of Life subscription for all employees, and counselling via the School of Life (UK) or our EAP program (Australia)
• Our generous employee referral program
• Mid-year, quarterly, and end-of-year corporate and team events and workshops
• Short-term remote working arrangements
• International travel opportunities (dependent on role)

You’ll also be able to take up the numerous other benefits that working at Littlepay affords you - including being part of a growing community of innovators at Stone and Chalk, where we enjoy lunch ‘n’ learns, summertime barbeques, ping pong tournaments, fortnightly drinks, catered breakfasts and morning teas, and more.

If this opportunity interests you, hit apply! We look forward to learning about you.

Littlepay are a 2023 Circle Back Initiative Employer – we commit to respond to every applicant.