Cyber Offensive Security Lead

at  Ampol

• Key role in Security maturity journey, uplifting Security Testing
• Hybrid, flexible working environment, with Alexandria (Sydney), Melbourne or Brisbane office options

DEMONSTRATED EXPERTISE AND EXPERIENCE WITH:

• SOA security design, controls and implementation
• A broad range of technical concepts: logical access control, agile development process, secure coding principles, security architecture, information security, network security, and privacy.
• Information/Cyber Security Frameworks and standards (ISO 27k, NIST, ITIL, SABSA, TOGAF, IRAP, COBIT, etc)
• IT information protection, security and regulatory policies and standards
• IT Systems Engineering Process and Engineering life cycles

THE ROLE:

The Cyber Offensive Security Lead will be part of the Cyber Security Architecture team for Ampol Group, responsible for developing and delivering the Enterprise Cyber Security Testing standards, guidelines and procedures (incl. Application Security, penetration testing etc).
The Cyber Offensive Security Lead will also provide cyber risk consulting, compliance, advice/recommendations across the enterprise to support current & future requirements, propose Security Testing solutions and governance that deliver the desired security posture.
This is a permanent position that can be based from any of our Australian offices (Alexandria NSW, Brisbane or Melbourne) with flexible, hybrid work options available.

KEY DUTIES:

• Identify, influence, advise and recommend cyber security services and technology that will enable business solutions to be delivered in a pragmatic manner whilst preserving the integrity of the Ampol enterprise environment and ensure ongoing compliance with relevant regulatory requirements.
• Analysis/assessment of business requests whilst constructively challenging and negotiating the requirements to derive the underlying needs together with development or quality assurance of solution designs, vendor proposals, business cases and service implementation plans/documentation.
• Provide guidance and support to Project teams on cyber security architectural risks and aspects of infrastructure or system development and integration
• Build and maintain effective working relationships with business customers and external vendors/suppliers to support Ampol objectives
• Support education and awareness activities to optimise the use of existing technologies, services and controls (people, process and technology) to arrive at a “risk-informed” and pragmatic outcome.
• Development, and communication of the enterprise cyber security architecture including defining the relevant design standards and legislative requirements (ISO, NIST, PCI/DSS,), policies, key principles, technical strategies/standards, guidelines and procedures required to support it.
• Assist the evolution of the enterprise cyber security architecture by defining the risks, policies, methods, models, tools, processes, and procedures that describe the organisation’s current and future cyber security state