Total 13 information technology job vacancies in Legal / Public / Security category in NSW - Sydney - City & Inner West

• Define, prepare and manage the deployment of the strategic security initiatives in the organization, as part of the larger information security management team.
• Work on increasing the maturity of the various functions of the security operation center department.
• Act as point of escalation for the internal customers of the information security team.
• Act as delegated sponsor of some of the global security initiatives.
• Deputize for the head of the department as well as other members of the security management team, when relevant.
• Participate in non-security projects as a security SME & SPOC, ensuring alignment of these initiatives with overall security strategy.
• Support the development and review of the security policies.
• Provide management oversight for internally run initiatives and teams. Collaborate closely with managers of security architecture, operational teams in the SOC as well as the security reporting team to improve & adapt the delivery of the teams to the internal customer demands.

Other Assignments:

• Build and maintain stakeholder/client relationships both internally and externally;
• Prepare and publish reporting to IT Management.
• Support the budgeting process for a 100 FTEs security operations department.
• Support the group head of information security and head of SOC in other daily duties;

What will I do in this position if hired?

In this Public Affairs Specialist (Joint Information Center Manager) position, you will develop update and maintain the function planning for the Joint Information Center component of External Affairs Case and oversee its implementation.

Typical assignments include:

• Supervising, evaluating performance, and overseeing the quality of work completed by assigned specialists.
• Developing, and maintaining the functional plan for the Joint Information Center component of External Affairs and oversee its implementation by specialists.
• Coordinating with other program areas and EA components to identify logistical needs and FEMA representatives for press conferences and events.
• Directing the dissemination of media analysis and social listening reports to internal
  stakeholders.

What else do I need to know?

At FEMA, our mission is to help people before, during and after disasters, and every employee at FEMA has a role in emergency management. Every FEMA employee has regular and recurring emergency management responsibilities, though not every position requires routine deployment to disaster sites. All positions are subject to recall around the clock for emergency management operations, which may require irregular work hours, work at locations other than the official duty station, and may include duties other than those specified in the employee's official position description. Travel requirements in support of emergency operations may be extensive in nature (weeks to months), with little advance notice, and may require employees to relocate to emergency sites with physically austere and operationally challenging conditions.

This announcement is for a position as an IM-CORE (Incident Management Cadre of Response/Recovery Employee). IM-CORE employees are full time employees hired to directly support the response and recovery efforts related to disasters. Employees hold an incident management title and are deployed to the greatest extent possible. Appointments to IM-CORE positions are two years in duration and may be renewed based upon workload needs and funding availability. Employees are hired under the Robert T. Stafford Act and are excluded from the provisions of title 5, United States Code, governing jobs in the competitive service. They can be hired under a streamlined process instead of a competitive process. After 3 years of continuous service, Stafford Act employees may be granted competitive eligibility to apply for permanent full-time positions at FEMA.

FEMA is committed to ensuring that its workforce reflects the diversity of the nation. At FEMA, our workforce includes the many identities, races, ethnicities, backgrounds, abilities, ages, cultures, and beliefs of the people we serve. To learn about FEMA's ongoing diversity and inclusion efforts, reasonable accommodation process, and the FEMA Core Values, please visit www.fema.gov.

MAJOR DUTIES: This is NOT an all-inclusive list.

• Initiates and implements policies and procedures required to manage sensitive compartmented information (SCI) programs and to protect SCI resources.
• Acts as resident expert on all SCI security matters.
• Functions as the technical authority in all other areas of classified security and classification guidance.
• Establishes policies and procedures for accomplishment of SCI protection and security.
• Researches, interprets, analyzes and applies Presidential Executive Orders, Director Central Intelligence Directives (DCIDs), Defense Intelligence Agency Manuals, DoD Manuals, Army / Air Force Manuals, Army Regulations / Air Force Instructions, and local Operating Instructions.
• Serves as the SCI Control Officer responsible for establishing, managing, and controlling all collateral and SCI classified information and material within the Sensitive Compartmented Information Facilities (SCIFs) affecting the Unit's mission.
• Ensures SCIFs comply with all applicable construction and physical requirements, standards, and regulations as delineated by higher headquarters.
• Works directly for the intelligence unit commander/Senior Intelligence Officer (SIO), reporting on the administration of the Special Security Office and SCI-associated security programs.
• Serves as the principal advisor to the intelligence unit commander/SIO on SCI, physical, computer, information, personnel, and administrative security.
• Manages and directs the activities and personnel of the unit Special Security Office.
• Plans and supervises work accomplished by assigned subordinates.
• Sets and adjusts short-term priorities and prepares schedules based on organization priorities and missions
• Appoints Local SCI courier officials that have a requirement to courier SCI on base and coordinates with the Defense Courier Service (DCS).
• Administers the SCI security clearance program for all assigned personnel, ensuring all required clearances are up-to-date and completed.
• Terminates or transfers SCI clearances for out-processing personnel.
• Provides oversight of unit and SSO security self-inspections and presents detailed and comprehensive reports with corrective action taken to the unit intelligence commander/SIO.
• Follows-up to ensure complete and quality resolution of discrepancies.
• Represents the intelligence unit to a variety of installation and functional areas, including national-level organizations.
• Interfaces directly with DoD, Defense Intelligence Agency, National Security Agency, Defense Intelligence Agency, US Army, US Air Force, Air Intelligence Agency, major commands, combatant commands, and other national-level agencies to evaluate, guide, and adjust unit programs to meet changing security needs and requirements as personally assessed or as directed.
• Performs other duties as assigned.

MAJOR DUTIES: This is NOT an all-inclusive list.

• Initiates and implements policies and procedures required to manage sensitive compartmented information (SCI) programs and to protect SCI resources.
• Acts as resident expert on all SCI security matters.
• Functions as the technical authority in all other areas of classified security and classification guidance.
• Establishes policies and procedures for accomplishment of SCI protection and security.
• Researches, interprets, analyzes and applies Presidential Executive Orders, Director Central Intelligence Directives (DCIDs), Defense Intelligence Agency Manuals, DoD Manuals, Army / Air Force Manuals, Army Regulations / Air Force Instructions, and local Operating Instructions.
• Serves as the SCI Control Officer responsible for establishing, managing, and controlling all collateral and SCI classified information and material within the Sensitive Compartmented Information Facilities (SCIFs) affecting the Unit's mission.
• Ensures SCIFs comply with all applicable construction and physical requirements, standards, and regulations as delineated by higher headquarters.
• Works directly for the intelligence unit commander/Senior Intelligence Officer (SIO), reporting on the administration of the Special Security Office and SCI-associated security programs.
• Serves as the principal advisor to the intelligence unit commander/SIO on SCI, physical, computer, information, personnel, and administrative security.
• Manages and directs the activities and personnel of the unit Special Security Office.
• Plans and supervises work accomplished by assigned subordinates.
• Sets and adjusts short-term priorities and prepares schedules based on organization priorities and missions
• Appoints Local SCI courier officials that have a requirement to courier SCI on base and coordinates with the Defense Courier Service (DCS).
• Administers the SCI security clearance program for all assigned personnel, ensuring all required clearances are up-to-date and completed.
• Terminates or transfers SCI clearances for out-processing personnel.
• Provides oversight of unit and SSO security self-inspections and presents detailed and comprehensive reports with corrective action taken to the unit intelligence commander/SIO.
• Follows-up to ensure complete and quality resolution of discrepancies.
• Represents the intelligence unit to a variety of installation and functional areas, including national-level organizations.
• Interfaces directly with DoD, Defense Intelligence Agency, National Security Agency, Defense Intelligence Agency, US Army, US Air Force, Air Intelligence Agency, major commands, combatant commands, and other national-level agencies to evaluate, guide, and adjust unit programs to meet changing security needs and requirements as personally assessed or as directed.
• Performs other duties as assigned.

Our client’s success is our success. And you make it happen! 

Payment systems are complex, regulated and everchanging. We are an established market leading brand who are focused on driving client growth. We’re at the forefront of innovation punching above our weight. We’re enabling the future for our clients through innovative technology like the New Payments Platform (NPP) and open banking.    

We are an unlisted public company and one of five licensed banks in Australia with full direct connectivity and production capability across all domestic payment systems. Whilst the major banks leverage this capability for their consumer and business clients, our B2B model focuses on enabling other banks, fintech’s and corporates to deliver innovative and competitive payment and digital solutions to their clients and customers. 

We are looking for an Information Security Risk Management Lead in our Group Risk and Compliance Team.  

Reporting to the Head of Operational Risk and Compliance, the Information Security Risk Management Lead is responsible for technology risk advisory, review/challenge, oversight and monitoring over information security and data risk frameworks and how it is operationalised. 

This is a highly visible role in the business ensuring technology risks are effectively identified, assessed, managed and monitored across Cuscal. Responsibilities of the Information Security Risk Management Lead in the team’s capacity as the second line of defence under the Risk Management Framework fall into four key areas: 

1) Technology Risk Management Framework Advisory, Oversight and Monitoring 

• Ensure Information Security Risks (technology and cyber) and Data risks are adequately managed through Cuscal’s frameworks in line with regulatory requirements (e.g. CPS 234,230, CPG 235 etc.), industry best practices and operating environment in line with three lines of defence   
• Ensure line 2 risk management capability is built and sustained to review, challenge, oversight and assurance reinforcing and maturing line 1 accountability with the business owners   
• Work collaboratively with Product domains, Engineering and corporate functions to embed technology risk management practices into everyday activities, embed controls, and monitor/report on issues.  
• Foster a risk culture that promotes open communication, transparency, and ownership of risk at all levels of the organisation  
• Risk Reporting & Analytics: Provide insights derived from technology and data risk reporting to the Board and Executive Leadership Team 

2) 2nd Line Review, Challenge and Oversight 

• Review and challenge risk/RiC assessments, adequacy and effectiveness of risk mitigation strategies, controls, and action plans implemented by 1st line teams.   
• Critically assess incidents, breaches, and near misses to identify systemic issues and recommend appropriate remediation actions.  
• Ensure the continuous improvement of risk management practices by engaging with business units to provide constructive feedback and challenge assumptions.   
• Act as a trusted advisor to senior leadership and business units on operational risk matters, including emerging risks, regulatory changes, and industry trends.   
• Drive education and training programs to elevate operational risk awareness and capabilities across the organisation.   
• Collaborate with product, client, and technology teams to ensure operational risk considerations are integrated into new initiatives, system changes, and major projects.   
• Line 2 support for assessments of third-party technology risks and controls. 

3) Emerging Risks and Innovation 

• Stay informed about the latest developments in AI and other emerging technologies to proactively identify potential risks. Support Cuscal teams in rapidly adopting new technologies in a safe and controlled manner. 
• Review/provide oversight over initiatives to automate technology risk & controls monitoring processes using advanced tools and technologies.  
•  Promote a culture of innovation in risk management practices, encouraging the adoption of new approaches and technologies. 

4) Stakeholder Engagement 

• Work closely with internal and external stakeholders as required, to ensure a cohesive approach to technology risk management.  
• Develop and deliver training programs to enhance technology risk awareness and competency across Cuscal.  
• Promote and drive a positive risk culture to lift overall risk management maturity across Cuscal.   

About You 
To be successful in this position you will have the following skills and experience: 

• Bachelor’s degree in information technology, Information Systems, Risk Management, Cybersecurity, Computer Engineering, or a related field. Relevant certifications (e.g., CRISC, CISA, CISSP) are desirable. 
• Minimum of 4-6 years of experience in technology risk management within the financial services industry. 
• Strong knowledge of risk management and IT frameworks and standards such as ITIL, ISO 27001, NIST, COBIT, and relevant APRA guidelines (CPS234, CPG235, CPS230, CPS220) 
• Demonstrated experience in managing risks associated with AI, machine learning, and other emerging technologies. 
• Prior experiencing leading risk maturity uplift at another organisation within a function, business unit or risk class. 
• Strong project management skills, including planning, execution, and stakeholder management. 

What’s it like to work here? 

As well as good pay and a great culture, we back our employees by helping them work towards industry-recognised qualifications, using online learning, training modules and career planning tools for you to grow with us. We are committed to providing a diverse and inclusive workplace where the very best talent in Australia chooses to work. We support our colleagues with flexible work arrangements through our hybrid model whilst also offering a wide range of financial, lifestyle, health & wellbeing benefits. 

 
Next Step 
If you think this role is the right fit for you, we invite you to apply. Let’s explore who you are and what drives you. We’d love to share our vision for the future of payments sector. Please note candidate screening and interviews may be conducted prior to the closing date of the job advert. 
   
Cuscal does not accept unsolicited resumes from recruitment agencies and search firms. Please do not email or send unsolicited resumes to any Cuscal employee, location or address. 

As an Information Security Engineer, you will be working on a team responsible for architecting, building, and scaling our global cryptographic security infrastructure systems. This role involves working with Security Architecture and ServiceNow product teams to design and deliver secure cryptographic infrastructure at scale.  

What you get to do in this role

• Define, configure, deliver, and operate cryptographic security services across our private and public cloud infrastructure.

• Work with Product and Program management to define and communicate the team's external commitments and roadmap.

• Assess risks, vulnerabilities, and mitigations of existing systems to ensure these systems are highly available, operationally sound, perform at scale, and exceed customer expectations.

• Collaborate with peer teams on complex, global engineering efforts to ensure architecture agreement, resource coordination, and implementation timelines.

• Set and sustain technical standards and best-practices in your domain.

• Work with vendors for cryptographic security services and technologies.

• We provide competitive compensation, generous benefits, and a professional atmosphere. This is a very collaborative and inclusive work environment where individuals strong on aptitude and attitude will have an opportunity to grow their professional careers through working with some of the most advanced technology and talented developers in the business.  

We are looking to recruit an Information Security Consultant to join our existing Information Security team.

Working with the Information Security team to provide advice and guidance on IT security and further develop IT policies and processes across a multi-region infrastructure consisting of 8300+ staff and 100+ sites.

As a member of the IT Security team, you will review all aspects of the IT environment and its components. This role shall be responsible for supporting and maintaining enterprise-wide solutions.

The successful candidate will be required to proactively improve and provide advice and guidance on information security matters. We believe this is an excellent opportunity for candidates who have a strong understanding of IT infrastructure and/or information security within a fast-paced environment.

SOX control responsibilities may be part of this role, which are to be adhered to where applicable.

Information Security Analyst
Leeds
£40,000 to £46,000

Your new company

Hays Technology are recruiting an Information Security Analyst to join a large public sector organisation based in the Leeds area. You will be reporting to the Network and Security Manager and will join the Network and Security Team.

Your new role

In your new role, you will be supporting the organisation to meet its IT and Cybersecurity compliance objectives including Cyber Essentials and PCI-DSS, whilst conducting IT and Cyber security risk assessments, cyber security reviews, and the co-ordination of security testing activities, and providing detailed analysis of cyber security information to develop prioritised risk-based recommendations.
You will be minimising the risk of data breaches through effective technology solutions, whilst supporting the development of tools, measures, benchmarks, and quality standards to measure and establish the effectiveness of the organisation's Cyber Security services and policies. You will also be assisting the Network, Security, and Infrastructure Managers with the Security of the organisation's network to support the organisation's infrastructure and to review and advise on the risk and security controls of all systems.

What you'll need to succeed

• Experience of providing IT support including to end users
• Experience in dealing with suppliers and third-party support
• Experience of analysing and handling potential IT security incidents (from a technical and user support perspective)
• Demonstrable knowledge of networking and security technologies
• Skilled in supporting and administering enterprise Windows based IT systems
• Ability to work closely and collaborate with stakeholders outside of the immediate team

What you'll get in return

This exciting position is paying between £40,000 and £46,000 negotiable on experience and offers an excellent work life balance including: hybrid working, 26 days + bank annual leave, 19% employer contribution pension scheme, flexibility, training, and development opportunities.

What you need to do now
If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or call us now.
If this job isn't quite right for you, but you are looking for a new position, please contact us for a confidential discussion on your career.

Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at hays.co.uk

About Us

Established in 1988, Rest is one of Australia’s largest profit-to-member superannuation funds.

We support nearly two million members, with around $75 billion of funds under management and are recognised as a responsible investment leader*. We believe when members understand and engage with their super, they’re more likely to get a better retirement outcome.

Everything we do at Rest is underpinned by our values and behaviours, we want to Be Daring, Keep it Simple, Take Action and Have Grit. To put it simply we want our people to thrive and love the work they do.

About the Job

The Information Security Cloud Analyst is responsible for safeguarding Rest’s cloud-based systems encompassing a broad range of activities including evaluating and mitigating risks, formulating cloud-specific security strategies, continuously watching for cyber threats, ensuring regulatory compliance, and responding to security incidents.

Additionally, the Information Security Cloud Analyst will create secure cloud designs and guardrails, educate employees on best practices, assess third-party vendors for security risks, maintain cloud security policies, and manage various cloud security technologies.

Key Responsibilities

• Design, deliver & monitor security controls in cloud platforms, with primary focus on AWS.
• Provide strategic security and risk guidance for cloud security and related projects, including the evaluation and recommendation of technical controls and platform architectural designs.
• Operate, enhance and evolve cloud-native and third-party SaaS cloud security tooling to assure security posture of the cloud platform meets internal and regulatory compliance requirements.
• Prioritise & ensure remediation of vulnerabilities identified through cloud security standards, policies & tools.
• Produce technical solutions and standard operating procedures for Security Operating Centre (SOC) to triage and respond efficiently to security events.
• Deliver knowledge transfer sessions across the business to uplift Cloud Security awareness to technical and non-technical stakeholders.
• Advise workload owners, developers & business partners to improve cloud security posture across cloud infrastructure, application & software delivery.
• Follow strict information security processes, plans and protocols in managing the life cycle of issues and incidents, which may include collaborating with internal stakeholders, vendors or third parties.
• Support the uplift of cyber incident management capabilities collaborating with information security governance, risk & operations
• Promote and reinforce security standards, policies and procedures ensuring ongoing compliance and, where gaps exist, develop plans for remediation.
• Participate in audits as required, collating, and providing information including closing out of audit issues.

Information Security & Compliance Officer

£33K to £45K plus LWA of £6,707 to £8,164 (only applicable in London)

Onsite/Hybrid working - London or Glasgow based

Permanent opportunity

My client are a leading Charity organisation who is seeking an experienced Information Security and Compliance Officer to join their IT team. This critical role will be responsible for maintaining information security policies and controls, conducting security reviews, and ensuring the protection of all information security assets.

Key Responsibilities:

• Work closely with the Head of IT and Data Protection Officer to provide security guidance for IT and departmental projects.
• Design and implement security standards, policies, guidelines, and architectural principles to meet the organisation's cyber security goals.
• Develop and implement data loss prevention (DLP) policies, data retention, classification, and archiving processes.
• Support the Data Protection Officer with data breach incidents and subject access request tasks.
• Audit external platforms and ensure they meet the organisation's security standards.
• Be part of the Cyber Security Incident Response team and respond to security inquiries.
• Promote cyber security awareness through training and internal phishing campaigns.
• Perform security and user permissions audits, organise penetration testing, and ensure corrective actions are taken.
• Monitor core platforms, network infrastructure, and systems for unusual activity and insider threats.

Qualifications and Experience:

• Degree-level education.
• Certified in CISSP or CISM, or working towards certification.
• Strong understanding of IT networking, firewalls, protocols, and access management concepts.
• Broad knowledge of various IT systems, including cloud computing platforms (Microsoft 365 and Azure), with a deep understanding of associated security risks.
• Experience working with and deploying SIEM and CASB systems, intrusion detection/prevention, and Microsoft conditional access policies.
• Familiarity with information security principles and best practices (e.g., ISO27001, ISF Standards of Good Practice for Information Security).
• Understanding of and practical experience with GDPR, Freedom of Information Act, and related legislation.
• Ability to present security topics to non-technical audiences and communicate business and technical risks effectively.
• Self-motivated and proactive approach.

Morgan Hunt is a multi-award-winning recruitment business for interim, contract and temporary recruitment and acts as an Employment Agency in relation to permanent vacancies. Morgan Hunt is an equal opportunities employer. Job suitability is assessed on merit in accordance with the individual's skills, qualifications and abilities to perform the relevant duties required in a particular role.

The Game Changers:
At AP+ we're changing the game! We're doing big things, and we can't do it alone. We're part of a big ecosystem, and we know teamwork and passion for our purpose is what will make us successful. We value the unique talents, perspectives, of all our employees. This includes people of all gender identities and sexual orientations, First Nations Peoples, people of all abilities and diverse backgrounds, as well as their families. AP+ brings together Australia’s three domestic payment providers, BPAY Group, eftpos and NPP Australia, into one integrated entity. Bringing these businesses together enables AP+ to create a more competitive and coordinated Australian payments organisation that is strategically placed to respond to the impacts of regulatory and technological change today, and into the future.

The Purpose:

At Australian Payments Plus (AP+), we're on a mission to revolutionise the payments industry and ensure the security of payments infrastructure across Australia. As the Chief Information Security Officer (CISO), you will play a critical role in safeguarding AP+ systems and data from cyber threats.

As the CISO, you will provide strategic and operational leadership for AP+'s information security program. You will develop and implement comprehensive security initiatives, policies, and procedures to protect our systems, networks, and data. You will be responsible for identifying and mitigating risks, managing security incidents, and ensuring compliance with relevant regulations and standards.

In addition, you will drive a culture of security awareness and promote best practices across the organisation. You will collaborate with cross-functional teams to integrate security into the development lifecycle and provide guidance on secure coding practices. You will also stay up to date with the latest industry trends and emerging threats to continuously enhance AP+'s security posture.

As the CISO your key responsibilities will be:

• Cyber Security Management
• Identity & Access Management
• Risk Management
• Security Architecture
• Testing, Compliance & Certifications
• Partner & Vendor Management
• People Leadership

In order to be considered for the CISO role you will need to demonstrate:

• Tertiary qualifications in Computer Science, Information Technology, or a related discipline.  And/or equivalent relevant knowledge and experience. 
• Professional security management certification such as CISM, CISSP or equivalent.
• Robust and proven experience leading and growing security functions in innovative, leading edge and fast paced environments.
• 10+ years’ experience in risk management and information security in a technical environment
• Experience leading, directing and developing technical staff in the execution of security program and project initiatives.
• Experience with contract and vendor negotiations and management including managed services.
• Experience with Cloud computing.
• Experience creating, testing and maintaining business continuity management and disaster recovery plans.
• Effective interpretation of security-related data allows CISOs to detect potential security threats.
• In-depth technical knowledge of cybersecurity tools and concepts, such as intrusion detection systems, firewalls, risk identifying tools and SIEM systems
• Strong understanding of information security, risk, privacy, and regulatory compliance
• Extensive knowledge of risk management techniques.
• Innovative thinking and leadership with an ability to lead and motivate cross-functional, interdisciplinary teams.
• Familiarity with relevant regulations and standards (e.g., PCI-DSS, ISO 27001).

What’s Next:
We know applying for a role can be a nerve-wracking experience, so we endeavor to review applications and plan to schedule screening interviews within the next two weeks. If you are among selected candidates, we’ll be in touch to schedule a phone interview. In any case, we will keep you posted on the status of your application.
We want to remove all barriers to inclusion so if you need advice or support with your application, we’re here to help. Please reach out to recruitment@auspayplus.com.au We also encourage you to let us know your pronouns at any point during the recruitment process.

AP+ are not partnering with Recruitment agencies for this role.