Total 34 financial analyst job vacancies in Legal / Public / Security category in Melbourne or Sydney

The Cyber Security Analyst will be a part of the security operations team (SOC) aspiring to detect, hunt and respond to cyber security threats to Nine. This role will be a great fit for a blue teamer with understanding and interest in red team tactics and techniques, someone with an analyst mindset who wants to be actively involved in threat hunting, threat intelligence management and investigations using automation, data analysis and curiosity.

This is a hands-on role in a flexible working environment in a small but high functioning and diverse team.  The role  involves detection engineering, incident response, threat hunting and will be interacting with a broad set of business units. Hence, communication skills, problem solving and day to day learning are a big part of it. There is opportunity for involvement in a wide variety of cyber transformational work, training and upskilling.

Responsibilities 

• Investigation and analysis of alerts, advisories and incidents

• Attack surface mapping, critical vulnerability triage and impact analysis

• Curation, enrichment and correlation of indicators, creating actionable intel and managing their lifecycle

• Detection engineering, development and improvement of detection signature base across the SOC toolset

• Data and attack based threat hunting

• Reporting on threat intel, metrics and publishing internal advisories 

• Automation of investigation, incident response and threat intel workflows

• Security Operations tooling management, configuration and operations

• Rotational on call roster 

About Us

Established in 1988, Rest is one of Australia’s largest profit-to-member superannuation funds.

We support nearly two million members, with around $75 billion of funds under management and are recognised as a responsible investment leader*. We believe when members understand and engage with their super, they’re more likely to get a better retirement outcome.

Everything we do at Rest is underpinned by our values and behaviours, we want to Be Daring, Keep it Simple, Take Action and Have Grit. To put it simply we want our people to thrive and love the work they do.

About the Job

The Information Security Cloud Analyst is responsible for safeguarding Rest’s cloud-based systems encompassing a broad range of activities including evaluating and mitigating risks, formulating cloud-specific security strategies, continuously watching for cyber threats, ensuring regulatory compliance, and responding to security incidents.

Additionally, the Information Security Cloud Analyst will create secure cloud designs and guardrails, educate employees on best practices, assess third-party vendors for security risks, maintain cloud security policies, and manage various cloud security technologies.

Key Responsibilities

• Design, deliver & monitor security controls in cloud platforms, with primary focus on AWS.
• Provide strategic security and risk guidance for cloud security and related projects, including the evaluation and recommendation of technical controls and platform architectural designs.
• Operate, enhance and evolve cloud-native and third-party SaaS cloud security tooling to assure security posture of the cloud platform meets internal and regulatory compliance requirements.
• Prioritise & ensure remediation of vulnerabilities identified through cloud security standards, policies & tools.
• Produce technical solutions and standard operating procedures for Security Operating Centre (SOC) to triage and respond efficiently to security events.
• Deliver knowledge transfer sessions across the business to uplift Cloud Security awareness to technical and non-technical stakeholders.
• Advise workload owners, developers & business partners to improve cloud security posture across cloud infrastructure, application & software delivery.
• Follow strict information security processes, plans and protocols in managing the life cycle of issues and incidents, which may include collaborating with internal stakeholders, vendors or third parties.
• Support the uplift of cyber incident management capabilities collaborating with information security governance, risk & operations
• Promote and reinforce security standards, policies and procedures ensuring ongoing compliance and, where gaps exist, develop plans for remediation.
• Participate in audits as required, collating, and providing information including closing out of audit issues.

What you get to do in this role
 
We are looking for a highly motivated, collaborative and technically experienced Security Compliance - Junior Analyst with ability to understand and influence cloud operational and security processes, effectively communicate ServiceNow’s controls including intent, and drive changes within the organisation through effective testing. The successful candidate must be reliable, resourceful and have a “can-do” attitude.  
 
You will be a key member of our team and play an important role in defining the Security and Compliance framework for a leading cloud company. In this role you will be required to demonstrate ability to analyse difficult problems, think out-of-box and provide pragmatic solutions and recommendations.   

ServiceNow current compliance initiatives are focused on, but not limited to Australia’s IRAP, Singapore MTCS, Japan’s ISMAP, and other global programs such as ISO 27001, ISO 27018, PCI, SSAE 18, and SOC 2. Security Compliance Junior Analyst will be involved in driving and measuring compliance for the cloud business systems, control areas, process, and product for company compliance initiatives.    
 
Responsibilities

• Perform activities to help measure and monitor compliance with company policies and procedures 
• Facilitate certifier requests and information gathering for audit activities and lead onsite audits
• Conduct activities to comply with the various Government Cyber Security requirements within the APJ
• Successfully drive security compliance testing activities across various teams within the organisation 
• Contribute by enhancing and maturing the existing common control framework 
• Liaise with Risk Management and conduct security risk assessment activities  
• Help our customers understand ServiceNow’s security and compliance control environment 
• Contribute towards enhancing the GRC tool and processes to meet compliance business needs