Cybersecurity Lead - Melbourne City Centre, Australia - Energy Safe Victoria

Energy Safe Victoria

Verified Company

Melbourne City Centre, Australia

3 weeks ago

Posted by:

Olivia Brown

beBee Recruiter

Description

About Energy Safe Victoria (ESV)
Our purpose is to keep Victorians energy safe and ensure energy is used confidently.

Through education, regulation and enforcement, we work to ensure that energy safety, supply and efficiency are a priority in Victoria and something our customers can be confident in.

Our people come from a wide range of professions with diverse skills and experience driving the success of ESV

About the opportunity
We have an exciting opportunity for a Cybersecurity Lead who will contribute by:

Support the development and implementation of all aspects of the information security program based on the Victorian Protective Data Security Framework and standards.

Including, but not limited to:

Assist with the creation and update of security policies, standards and procedures
Monitor compliance with all cyber policies and procedures.
Participate in risk assessment and risk mitigation processes
Assist with the ongoing security awareness training program.
Support the information security risk management framework, including, but not limited to
Liaise with the external Security Operation Centre to maintain awareness of threats and respond appropriately.
Fix detected vulnerabilities to maintain a highsecurity standard.
Identify cyber security concerns and recommend improvements to ESVs security controls
Participate in or execute cyber security activities such as threat hunting, threat detection, phishing simulations, and incident response.
Analyse and report on malicious behaviour and cyber attacks.
Lead the development of cyber security reports and dashboards.
Participate in IT Service Management (ITSM) constant improvement.
Educate and build awareness of users through delivery of cybersecurity training and awareness programs to improve ESV cybersecurity maturity and build ESV's capabilities at all levels.
Monitor IT and security supply chains to ensure compliance with Victorian Government and ESV policies and contracts.
Develop, maintain, and provide expert advice and recommendations to influence key decision makers on Information Security policies, standards, procedures to align with the ISMF and VPDSF across ESV through indepth research, analysis, and assessments.
Provide cyber security support and advice for digital solutions and platforms.

To be successful, you'll have:

Relevant tertiary qualifications in Tertiary qualifications in information technology or similar plus Cyber security certifications e.g. CISSP, CISM, Microsoft SC200
Demonstrated experience in similar role in information security or related field.
Extensive experience in information security, with a strong working knowledge of security frameworks and standards including VPDSS, Essential 8, ISO 27001, NIST.
Extensive experience in Microsoft Azure and M36
Strong technical knowledge with networking, infrastructure, SaaS, Paas, IaaS, ITIL.
Welldeveloped incident response and analytical problemsolving skills.
Exceptional communication (verbal and written), interpersonal and stakeholder management skills to influence internal and external stakeholders, particularly with thirdparty / vendor management.
Understanding of firewalls, proxies, SIEM, antivirus and IDPS concepts.
Ability to identify and mitigate vulnerabilities and explain how to avoid them.
Experience within the Victorian Government Public Sector, regulatory, energy or utilities environment (desired)
Experience with computer network penetration testing and MITRE ATT&CK (desired)
Experience of Microsoft Sentinel and KQL (desired)

How to apply

Applications close at midnight on Monday 26 February 2024