Cyber Security Compliance Officer

at  Thales

At Thales, we know technology has the ability to make our world more secure, sustainable, and inclusive – and that it’s all driven by human intelligence.
Because it takes human intelligence to build and power the systems and solutions that people depend on every day. So we stay curious and make space for diverse points of view. We share what we know and we challenge what’s possible.
From manufacturing and engineering to cybersecurity and space, we’re driving progress in some of the world’s most important industries – and working together to build a future we can all trust.
A great opportunity has become available for an experienced Cyber Security Compliance Officer to join our team based in Sydney Olympic Park.
The Cyber Security Compliance Officer will be responsible for development of capability across business lines and projects to meet cyber security compliance needs. These business or project compliance requirements can stem from system accreditation obligations, Group business line engineering and product cyber standards, or contractual needs to comply against an external standard or framework.

YOUR EXPERIENCE

To be successful in your role, you will have demonstrated and/or acquired the following knowledge and experience:

• You will have strong business partnering skills to be successful in this position.
• You will have very strong communication skills - there will be a diverse set of stakeholders that you will have to engage with (technical to non-technical, general managers, project managers), and understanding communication styles will be a critical to your success.
• Propose and facilitate innovation initiatives and contribute to maturity improvement strategies.
• You will have experience in building sustainable processes with supporting documentation so that as the programs are developed and certain processes are repeatable, and the reports/KPIs/dashboards are comparable across the business.
• Advanced organisational skills with the ability to prioritise tasks and meet deadlines
• Knowledge of the cyber frameworks used across industry
• Technical knowledge of cyber controls and how they are implemented would be advantageous

YOUR ROLE

Located in Sydney Olympic Park, on Wann-gal land, your role purpose will be:

• Work with each of the business lines, and sites for Thales Australia/New Zealand, to support them in completing their obligations in auditing, documenting and ensuring minimal cyber levels are implemented for Business Managed Networks (BMNs).
• Identify and apply relevant security standards and frameworks, such as ISO, ISM, Essential 8, and IEC, to BMN operations.
• Maintain and enhance the consolidated compliance status reporting, KPIs and dashboard
• Identify and co-ordinate the establishment of robust cyber security protocols, procedures, and solutions, aligning with industry best practices to provide cost effectiveness.
• Provide recommendation to business lines and sites for the implementation of the cyber security service offerings for BMNs.
• Define and manage a Plan of Action and Milestones (POAM) to enhance maturity.
• Conduct annual security risk analysis and technical audits to ensure continuous improvement in cyber security practices.
• Assist in supporting business lines and projects in understanding and maintaining accreditation requirements for accredited information systems.

To be successful in your role, you will have demonstrated and/or acquired the following knowledge and experience:

• You will have strong business partnering skills to be successful in this position.
• You will have very strong communication skills - there will be a diverse set of stakeholders that you will have to engage with (technical to non-technical, general managers, project managers), and understanding communication styles will be a critical to your success.
• Propose and facilitate innovation initiatives and contribute to maturity improvement strategies.
• You will have experience in building sustainable processes with supporting documentation so that as the programs are developed and certain processes are repeatable, and the reports/KPIs/dashboards are comparable across the business.
• Advanced organisational skills with the ability to prioritise tasks and meet deadlines
• Knowledge of the cyber frameworks used across industry
• Technical knowledge of cyber controls and how they are implemented would be advantageou