Cyber-security Risk and Compliance Specialist - Cenitex - EngineeringCareer

First listed on: 01 June 2020

Cyber-security Risk and Compliance Specialist

Our vision is ‘to support a modern, agile and productive public sector'. Cenitex plays a significant role in creating the Victorian Government's direction for major systems, cyber-security, and government-wide technology capability uplift.

Cenitex continues its evolution to realign its structure with current and emerging services and ensure we're best placed to deliver high quality results that meet our customers' requirements now and in the future. We don't want to just respond to our customers' continually expanding needs for new products and services, we want to be on the cutting edge of technology and bring the ideas to them before they even know they want them.

The opportunity:
Reporting to the Security Strategy and Governance Manager, the Cybersecurity Risk and Compliance Specialist will have the opportunity to work closely with other roles within and outside the organisation to help establish frameworks and processes for cybersecurity assurance, risk and compliance management and security awareness.

Day to day you'll be expected to:
• Assess, document and manage cyber security risks for Cenitex services, business systems and information.
• Coordinate technical security assessments, including penetration testing.
• Perform compliance assessments cyber security controls and produce reports for internal and external stakeholders.
• Develop and maintain Cenitex cyber security frameworks and policies aligned to regulatory and industry security standards.
• Plan and deploy security awareness training and awareness programs for Cenitex staff.

To be a success in this role you will have:
• Tertiary qualifications in ICT, Engineering or Business/Technology and/or equivalent experience.
• Extensive experience in a combination of risk management, information security and IT roles.
• Experience in the assessment and implementation of relevant standards such as VPDSS, NIST, ISO 27001, ISM, PSPF and COBIT.
• Relevant IT qualification and professional information security certifications such as CISSP, CISM, CISA, CRISC or other similar industry recognised certifications is preferred.
• Strong communication and interpersonal skills including the ability to build productive relationships with stakeholders.
• Research, analytical and problem-solving skills.

Who are we?
Cenitex brings together the best technology and the best people to keep the Victorian Government operating, connected and working for the community 24/7. Our customers are at the centre of everything we do, and our goal is to provide reliable, robust and contemporary shared services and technology so the Departments, agencies and over 35,000 employees we work alongside, can deliver great service for the Victorian public. We value Respect, Courage, Accountability, Collaboration, and Initiative.

Next steps:
If this role sounds like you, please click the "Apply now" button and follow the steps in the application form.  Note, applicants are not required to provide a separate document addressing the Key Selection Criteria.

The successful interviewing applicants must provide their right to work in Australia. All successful final stage applicants are subject to a National Police Check.

For further information please contact the Talent and Resourcing team via email cenitex.recruitment@cenitex.vic.gov.au. Please note, applications will not be accepted through this email.