Total 8 information analyst job vacancies in Legal / Public / Security category in Sisseton, South Dakota

The Game Changers:
At AP+ we're changing the game! We're doing big things, and we can't do it alone. We're part of a big ecosystem, and we know teamwork and passion for our purpose is what will make us successful. We value the unique talents, perspectives, of all our employees. This includes people of all gender identities and sexual orientations, First Nations Peoples, people of all abilities and diverse backgrounds, as well as their families. AP+ brings together Australia’s three domestic payment providers, BPAY Group, eftpos and NPP Australia, into one integrated entity. Bringing these businesses together enables AP+ to create a more competitive and coordinated Australian payments organisation that is strategically placed to respond to the impacts of regulatory and technological change today, and into the future.

The Purpose:

At Australian Payments Plus (AP+), we're on a mission to revolutionise the payments industry and ensure the security of payments infrastructure across Australia. As the Chief Information Security Officer (CISO), you will play a critical role in safeguarding AP+ systems and data from cyber threats.

As the CISO, you will provide strategic and operational leadership for AP+'s information security program. You will develop and implement comprehensive security initiatives, policies, and procedures to protect our systems, networks, and data. You will be responsible for identifying and mitigating risks, managing security incidents, and ensuring compliance with relevant regulations and standards.

In addition, you will drive a culture of security awareness and promote best practices across the organisation. You will collaborate with cross-functional teams to integrate security into the development lifecycle and provide guidance on secure coding practices. You will also stay up to date with the latest industry trends and emerging threats to continuously enhance AP+'s security posture.

As the CISO your key responsibilities will be:

• Cyber Security Management
• Identity & Access Management
• Risk Management
• Security Architecture
• Testing, Compliance & Certifications
• Partner & Vendor Management
• People Leadership

In order to be considered for the CISO role you will need to demonstrate:

• Tertiary qualifications in Computer Science, Information Technology, or a related discipline.  And/or equivalent relevant knowledge and experience. 
• Professional security management certification such as CISM, CISSP or equivalent.
• Robust and proven experience leading and growing security functions in innovative, leading edge and fast paced environments.
• 10+ years’ experience in risk management and information security in a technical environment
• Experience leading, directing and developing technical staff in the execution of security program and project initiatives.
• Experience with contract and vendor negotiations and management including managed services.
• Experience with Cloud computing.
• Experience creating, testing and maintaining business continuity management and disaster recovery plans.
• Effective interpretation of security-related data allows CISOs to detect potential security threats.
• In-depth technical knowledge of cybersecurity tools and concepts, such as intrusion detection systems, firewalls, risk identifying tools and SIEM systems
• Strong understanding of information security, risk, privacy, and regulatory compliance
• Extensive knowledge of risk management techniques.
• Innovative thinking and leadership with an ability to lead and motivate cross-functional, interdisciplinary teams.
• Familiarity with relevant regulations and standards (e.g., PCI-DSS, ISO 27001).

What’s Next:
We know applying for a role can be a nerve-wracking experience, so we endeavor to review applications and plan to schedule screening interviews within the next two weeks. If you are among selected candidates, we’ll be in touch to schedule a phone interview. In any case, we will keep you posted on the status of your application.
We want to remove all barriers to inclusion so if you need advice or support with your application, we’re here to help. Please reach out to recruitment@auspayplus.com.au We also encourage you to let us know your pronouns at any point during the recruitment process.

AP+ are not partnering with Recruitment agencies for this role.

Stay up to date on everything Blackbaud, follow us on Linkedin, Twitter, Instagram, Facebook and YouTube ​

Blackbaud is a remote-first company which embraces a flexible remote work culture.  Blackbaud supports hiring and career development for all roles from the location you are in today!

Blackbaud is proud to be an equal opportunity employer and is committed to maintaining a diverse and inclusive work environment. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, physical or mental disability, age, or veteran status or any other basis protected by federal, state, or local law.

To all recruitment agencies: We do not accept unsolicited agency resumes and are not responsible for any fees related to unsolicited resumes.

A notice to candidates: Recruitment Fraudulent Alert: Your personal information and online safety as a candidate mean a lot to us! At Blackbaud and our portfolio of companies, recruiters only direct candidates to apply through our official careers page at https://careers.blackbaud.com/us/en or our official LinkedIn page. Recruiters will never request payments, ask for financial account information or sensitive information like social security numbers, or conduct interviews via Skype.  Anyone suggesting otherwise is not a representative of Blackbaud. If you are unsure if a message is from Blackbaud, please email blackbaudrecruiting@blackbaud.com. 

Benefits Include:

• Medical, dental, and vision insurance

• Remote-first workforce

• 401(k) program with employer match

• Flexible paid time off

• Generous Parental Leave

• Volunteer for vacation

• Opportunities to connect to build community and belonging

• Pet insurance, legal and identity protection

• Tuition reimbursement program

As a Senior Cybersecurity Analyst specializing in risk management, you will play a crucial role in identifying, assessing, and mitigating cybersecurity risks across our organization. You will be responsible for executing risk management strategies, conducting risk assessments, quantifying risks, and collaborating with cross-functional teams to ensure the security of our systems, networks, and data.

What you'll be doing:

• Lead the cybersecurity risk management process, including identifying, analyzing, prioritizing, and quantifying cybersecurity risks based on business impact and likelihood of occurrence.

• Develop and maintain risk management frameworks, policies, and procedures in alignment with industry standards and regulatory requirements.

• Conduct regular risk assessments to identify potential threats and vulnerabilities, and collaborate with stakeholders to address findings.

• Provide guidance and recommendations on risk mitigation strategies, controls implementation, and security best practices.

• Collaborate with internal teams, including IT, compliance, legal, and business units, to integrate cybersecurity risk management into business processes and decision-making.

• Monitor and assess emerging cybersecurity threats and trends, and proactively recommend measures to enhance the organization's cybersecurity posture.

• Act as a subject matter expert on cybersecurity risk management, providing mentorship and training to other analysts and stakeholders as needed.

What we'd like you to have:

• 3+ years in cybersecurity risk management, with a focus on assessing and mitigating cybersecurity risks in complex IT environments.

• In-depth knowledge of cybersecurity frameworks, standards, and regulations (e.g., NIST Cybersecurity Framework, NIST 800-37, FAIR, etc.).

• Prior experience with Risk Management GRC tools (e.g., ServiceNow, Archer, etc).

• Strong analytical skills and ability to effectively prioritize and manage multiple tasks and projects in a fast-paced environment.

• Excellent communication and interpersonal skills, with the ability to convey technical concepts to non-technical stakeholders and collaborate effectively across teams.

• Strong understanding of emerging cybersecurity threats and trends, and ability to stay abreast of evolving industry best practices and regulatory requirements.

Join our team and contribute to building a resilient cybersecurity program that protects our organization's assets, reputation, and stakeholders.

#LI-REMOTE

Stay up to date on everything Blackbaud, follow us on Linkedin, Twitter, Instagram, Facebook and YouTube ​

Blackbaud is a remote-first company which embraces a flexible remote work culture.  Blackbaud supports hiring and career development for all roles from the location you are in today!

Blackbaud is proud to be an equal opportunity employer and is committed to maintaining a diverse and inclusive work environment. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, physical or mental disability, age, or veteran status or any other basis protected by federal, state, or local law.

To all recruitment agencies: We do not accept unsolicited agency resumes and are not responsible for any fees related to unsolicited resumes.

A notice to candidates: Recruitment Fraudulent Alert: Your personal information and online safety as a candidate mean a lot to us! At Blackbaud and our portfolio of companies, recruiters only direct candidates to apply through our official careers page at https://careers.blackbaud.com/us/en or our official LinkedIn page. Recruiters will never request payments, ask for financial account information or sensitive information like social security numbers, or conduct interviews via Skype.  Anyone suggesting otherwise is not a representative of Blackbaud. If you are unsure if a message is from Blackbaud, please email blackbaudrecruiting@blackbaud.com. 

Benefits Include:

• Medical, dental, and vision insurance

• Remote-first workforce

• 401(k) program with employer match

• Flexible paid time off

• Generous Parental Leave

• Volunteer for vacation

• Opportunities to connect to build community and belonging

• Pet insurance, legal and identity protection

• Tuition reimbursement program

Senior IT Cyber Security Analyst - CISSP or CySA+ or MSc Information Security

Weymouth, Dorset, or London, South East UK or Stoke on Trent, Staffordshire

£45,000pa + £5,000 Car Allowance, Hybrid & Flexi-Working & Training & Certifications Available

Weymouth, Dorset, or London, South East UK, or Staffordshire + Hybrid and Flexible Working as Standard

The Client: Are a well-known High St and Online retailer who are seeking a Senior IT Cyber Security Analyst who specialises in Microsoft / Wintel Servers and Virtualisation supporting a UK wide infrastructure.

Objective: You will support the Head of Information Security in delivering the Information Security service to the global business.

You will lead all Cyber Security Operations function and be the first point of contact for technical information security related matters.

Role Responsibilities:

• Act as the first point of action or escalation for the identification of security incidents and their investigation.
• Be responsible for the managed Security Operations Centre (SOC), Network Monitoring and Managed Detection and Response services and associated vendor relationships.
• Be the subject matter expert for technical security related queries, providing the Security Architect, IT Service and Delivery teams and business stakeholders with authoritative advice and defined security requirements.
• Be responsible for the Security Education and Awareness scheme.
• Ensure Cyber Security campaigns are conducted, and improvements implemented and ensure colleague queries around policies and requirements are appropriately answered in a timely manner.
• Be responsible for the Vulnerability Management process.
• Act on vulnerability information and conduct Cyber Security risk assessments and work with suppliers, partners, and internal teams to ensure security vulnerabilities are identified, assessed, and remediated in good time.

Key Requirements you will need:

• In depth knowledge of Information Security concepts and principles, including cloud security capabilities.
• Experience with configuring and utilising security tooling, including SIEM, EDR, vulnerability scanners, CASB, network scanning, DLP.
• Hands-on IT experience with proven expertise in a previous Information Security role.
• Vendor management experience.
• A relevant intermediate or advanced Information Security based qualification (e.g. CISSP, CySA+, MSc Information Security)
• Ability to critically analyse information and make decisions based on judgement, knowledge, and experience.

Business Knowledge:

• Knowledge of Retail and eCommerce is of great advantage but is not essential.
• Working knowledge of the Information Security elements of Data Protection regulations (e.g. GDPR, The Data Protection Act 2018) is essential.
• Knowledge of the NIST Cyber Security Framework is of advantage.
• Awareness of regulations that affect Retail, such as PCI DSS, is of great advantage but experience of maintaining compliance is not essential.

CISSP or CySA+ or MSc Information Security Certifications will be advantageous.

Call 0121 712 8715 today!

About Us

The Missing Link have been operating in Australia for over 26 years with offices in both Sydney and Melbourne. With over 180+ staff, you will be joining a highly successful team which is set to grow.

Our core offerings include cyber security, hardware and software, resiliency, cloud, communications, infrastructure, consulting services and managed services.

Our Security division is one of the fastest growing Cyber Security businesses in Australia and is split into three service areas:

• Red Team (Security Consulting & Penetration Testing)

• Blue Team (Security Architecture & Engineering)

• Security Operations Centre (SOC)

We're recognised as industry leaders and accredited to the highest levels in the design, delivery, and support of the latest technologies. We partner with market-leading global and local vendors to deliver world-class business outcomes through IT transformation. Today, The Missing Link is one of the most awarded IT companies in Australia.

We have a number of focus areas and specialisation within the SOC, these are:

• Defender: SOC Engineers who are responsible for the proactive management, maintenance and incidents involving security solution software and infrastructure

• Hunter: SOC Analysts who conduct regular hunts through telemetry from various security solutions looking for IOCs and BIOCs

• Watcher: SOC Analysts who triage and investigate alerts from various security solutions but primarily from EDR and SIEM

• Responder: SOC Analysts who lead or contribute to the progression and resolution of Incident Response scenarios
  

The Role

The Missing Link Security Operations Centre provides 24x7 Managed Detection & Response (MDR) support to our clients across a variety of sectors. Day-to-day you will be responsible for the monitoring and triaging of alerts from market-leading MDR technologies, collaborating with our SOC Engineers, Red Team and our clients to develop, test and tune use cases through Purple Teaming exercises.

You will also be proactively supporting our clients and the Senior Security Analysts in responding to security incidents, through log and malware analysis, OSINT and researching the latest zero-day vulnerabilities.

We believe in investing in and developing our people through a variety of training and education programs. When you first come on board, you’ll be given a structured training and development plan that is tailored to you and your previous experiences. This will include a combination of industry qualifications as well as vendor-specific certifications specific to your role.

Essential:

• 1+ years of experience working with systems, networking and security technologies either in an Managed Service Provider, or equivalent role.

• Hands-on security knowledge of Windows/Linux/Unix platforms

• Hands-on experience with one or more SIEM/EDR/VM systems and can demonstrate end to end knowledge of the TDIR Methodology

• In-depth knowledge of the MITRE ATT&CK Framework

• A demonstrated knowledge of IT security controls, OSI Model and TCP IP Stack

Desirable:

• You are naturally curious and a self-starter. Tell us about how you build Cyber Labs and Ranges in your own time, or your latest research project.

• You listen to and follow podcasts and bloggers like Darknet Diaries, Recorded Future, @IT_SecGuru or @TheHackerNews. Tell us what r/ threads you’re currently tracking.

• You have exposure to Vulnerability Assessments or Penetration Testing professionally or through your own personal research. If you’ve started a CEH or OSCP certification, even better!

• Show us how you automate using PowerShell and Python. • You have COMPLETED, not started, certifications such as CompTIA Network+ and Security+ as well as core networking such as Cisco CCNA or CCNP.

A great company culture is very important to The Missing Link. Keeping everyone happy is one of our top priorities.

Here are some of the best bits about working at The Missing Link and some of the ways we try and maintain our staff happiness levels:

• Supportive, collaborative and respectful environment
• Training / mentoring programs
• Regular fun social events
• Diverse range of employee benefits including paid volunteer days
• Great bonus structure
• Free breakfast, drinks and monthly lunches

•        We're changing the game!
•        We're doing big things, and we can't do it alone.
•        We're part of a big ecosystem, and we know teamwork and passion for our purpose is what will make us successful.

AP+ bring together Australia’s three domestic payment organisations into one integrated entity. Operating in the public interest, AP+ focuses on meeting the needs of all payment users and representing the views of a diverse range of stakeholders. BPAY Group, eftpos and NPP Australia continue to operate as distinct brands within a Group Leadership Team structure.

AP+ is intended to create a more efficient and agile payments group, building the competitiveness of Australian domestic payments infrastructure, and delivering significant benefits to Australian consumers and businesses.

Role purpose

• To bring a targeted and disciplined approach to security monitoring and testing, identifying risks, and providing reporting to the technical administrators as well as the business department heads 
• The role works within the Security function, so would require someone who is proactive and analytical with a curious mindset, who can understand and derive data from a number of sources and report on the findings in a number of formats.

Key Responsibilities

• Maintain security monitoring through a range of tools within AP+ such as Qualys, Splunk, Darktrace, Crowdstrike, AWS, Microsoft and others to proactively monitor the security of the environments.
• Being able to analyse, interpret and utilise data to add value to the security function in being proactive on what/why/how trends occur, and present the findings for the head of security to report to the business leaders. 
• Utilising a wide range of tools and work with the security team to automate a range of reports to provide trending and business risk analysis. 
• Understand and keep up to date with the latest news or updates on cyber security and feed that information into the reporting. 
• Work within the security team to promote cyber awareness across the business.

Key Challenges

• Absorb data and produce meaningful and business digestible reports.
• Key scripting or programming knowledge to perform data analysis.
• Strong communications skills particularly in report writing.
• Understand a large data set and derive actionable information from it 
• Gathering and utilising data from numerous tools 
• Upskill in programming languages, ideally Python to automate large workloads. 
• Strong excel, powerpoint skills to present data to a business audience. 
• PowerBI or other data analytic tool skills ideal

• Relevant certifications or equivalent experience in information technology, computer science or a related discipline.
• At least 2-3 year’s experience in an IT role working with technologies.
• Strong data analysis and cyber security knowledge.
• Python or similar data programming , strong excel skills for data management, strong PowerBI or other data analysis tools.
• Strong MS office skills beyond basic usage.
• Strong verbal and written ability.
• Exceptional report writing skills.
• Strong analytical skills and problem solving ability.

We know applying for a role can be a nerve-wracking experience, so we endeavor to review applications and plan to schedule screening interviews within the next two weeks. If you are among selected candidates, we’ll be in touch to schedule a phone interview. In any case, we will keep you posted on the status of your application.

We want to remove all barriers to inclusion so if you need advice or support with your application, we’re here to help. Please reach out to recruitment@auspayplus.com.au. We also encourage you to let us know your pronouns at any point during the recruitment process.

*AP+ are not working with Recruitment Agencies for this role.

The Company:

Our client is a multi-national information technology company with its headquarters in Singapore. It is also the largest Systems Integrator domestically.

The Project:

This project consists of multiple teams deployed within Cybersecurity Operations Command Centre delivering mission critical 24x7 threat monitoring, prevention, analysis, intelligence to high-valued clients.

The Role :

1. Provide support for internet security surveillance activities.

2. Responsibility for managing and escalating security incidents, ensuring a prompt and effective response.

3. Assist in the thorough preparation of incident reports, contributing to comprehensive documentation of security events.

4. Assist in detecting and resolving issues arising from security incidents, and demonstrate a proactive approach to maintaining system integrity.

5. Provide first-level troubleshooting for serviced devices, and address and resolve security-related issues.

6. Work closely with engineers team to troubleshoot and resolve problems. Your expertise and insights will play a crucial role in finding effective solutions.

7. Stay informed about the latest security advancements by consistently reviewing security updates and ensuring that systems are up to date with the most current protective measures..

8. Provide support for the Level 1 (L1) team by assisting with resource management, helping to ensure operational continuity and efficiency.

9. Assist in the onboarding program for new security analysts, facilitate a smooth integration into the team and ensure familiarity with established protocols.

1. Minimum requirement is a Diploma with a module in IT or Cyber Security.

2. Having a security Analyst certification like Certified Ethical Hacker (CEH), Certified Security Analyst (ECSA), or Computer Hacking Forensic Investigator (CHFI) is advantageous but not mandatory.

3. Preferably, candidates should have experience in one or more of the following areas:

• Management of IDS/IPS and firewall systems.
• Experience in Vulnerability Assessment, penetration testing, and risk assessment using various scanning and penetration testing tools.
• Knowledge of Unix, WIN2K, NT, and web server security practices such as OS tightening, SSO, and virus scanning.

4. General understanding of Information Security concepts.

5. Adequate understanding of Layer 1-7 Networking concepts is required.

6. Ability to follow predefined procedures, policies, and processes, and work under pressure.

7. Good communication skills (verbal, reading, and writing).

8. Working hours are from 9.00 AM to 6.30 PM, Monday to Friday.

• End of contract bonus