Cyber Security Compliance Specialist

We required and experienced Cyber Security Compliance Specialist.  Working under minimal supervision and direction, to identify cyber risk and ensure compliance with our clients standards and the Australian Government Security Framework, relevant laws and regulations, and industry best practices.

This position also assists in maintaining and developing appropriate ICT policies, procedures, and documentation to maintain compliance with legislation and Policy. Reviews and evaluates cyber compliance issues and concerns within the department.

Duties
The Cyber Security Compliance Officer is responsible for:

• Ensure ongoing compliance with ICT policies and procedures
• Design and/or conduct Cyber Compliance risk assessments
• Build and maintain the controls matrix in alignment with multiple compliance frameworks and standards
• Prepare compliance reports and status reports, identify issues, and report to senior management 
• Support key business initiatives by identifying security and compliance related risks
• Assist with various ICT internal and external audits, and their responses and remediation efforts
• Ensuring internal compliance (including ICT, vulnerability scans, annual training, etc.) are executed in a timely manner 
• Understand impact of vendor assessments and assist with the ICT vendor management program, and 
• Communicate to senior management, through reports, presentations, metrics and other documentation, any cyber-security risks identified. 

Essential criteria

1. Two or more years of experience in Cyber Security Governance, Risk and Compliance
2. Knowledge of and experience with relevant government security frameworks
3. Knowledge and experience with enterprise information and cyber security processes, concepts, and best practice with an exposure to government cloud models
4. Experience in analysing and interpreting information to develop recommendations to the Agency Senior Executive.
5. Strong written and oral communications skills

Desirable criteria

1. ICT risk and compliance experience
2. CISSP/CISM or equivalent certifications are preferred
3. Demonstrated experience in effective reporting to executive management
4. Demonstrated experience in adaptive leadership and collaboration and in challenging change environments

Location and Contract Term:
The role is based in Canberra (Greenway) or Geelong (Victoria), hybrid role on offer (minimum of 3 days each week in the office, with flexible arrangements in place for the remaining 2 days)  

Start date:
Estimate start of 8 May for 12 months with a 1 x 12-month extension options.

Security Requirements:
Must hold Australian Citizenship and be willing to undergo Security Vetting processes. Hold or be willing to obtain NV1 clearance (minimum).

How to apply:
Please upload your resume to apply. Please note you will be required to complete a selection criterion to complete this application process. We will be in touch with instructions for suitably skilled candidates.

Call Kym 1300 944 936 or email [email protected] for any further information.
#LI-KH1