Positions Vacant
We currently have the following positions vacant:
We are seeking one IT Security Specialist (full time).
The IT Security Specialist is responsible for providing advice and guidance on Information Technology and Operational Technology security, including the design and implementation of security controls. The IT Security Specialist will contribute to the delivery of the security program and the continual improvement of ConnectEast’s security posture, including adherence to Payment Card Industry Data Security Standards and protection of customer data in accordance with the Privacy Act (as amended from time to time). The IT Security Specialist will ensure that employees understand and adhere to necessary policies and procedures to maintain information security.
Key responsibilities include:
Assist in maintaining compliance with Payment Card Industry Data Security Standards
Provide technical advice and guidance on security controls for IT/OT systems and networks
Drive continuous improvement in cyber security by identifying areas of risk
Identify and prepare detailed security requirements for projects
Conduct internal security compliance audits; provide recommendations to mitigate identified issues
Assist in preparation for external compliance audits and evidence collection
Assist in simulated security crisis management exercises, red teaming and phishing campaigns
Assist in preparing business cases and statements of work for security projects
Evaluate and provide recommendations for security products and solutions
Promote a security awareness culture through regular reminders, updates and insights; Develop security awareness training material; Conduct occasional training sessions on a selected topic
Remaining current with cyber security technology, practices and key threats to provide informed decision-making and minimise cyber security incidents
Create security policies, standards and procedures
Assist in troubleshooting security issues including root cause analysis and strategies to minimise future events
Assist with user testing (Security related) as required
Understanding of vulnerability assessments and penetration testing and advising on resolution and mitigation
Conduct research on emerging threats, provide guidance on security products, services and standards to protect our systems, networks and data
Undertake cyber security risk assessments; analyse business impacts and exposure based on emerging security threats, vulnerabilities and risks
For details about this position, including how to apply, please read the following:
