Where you’ll add value

As a Cyber Security Officer, you will support the day-to-day operation and continuous improvement of cyber security controls across the organisation. A key focus of the role will be vulnerability management, including scanning, risk assessment, remediation coordination and reporting.

Working with technologies including Rapid7 InsightVM, Microsoft security platforms and infrastructure security tools, you will help reduce cyber risk and strengthen the security posture of our environments.

Working as part of an inclusive and collaborative team your key responsibilities will include:

• Manage vulnerability scanning, assessment, prioritisation and remediation activities across technology environments.
• Administer and maintain Rapid7 InsightVM, including reporting, monitoring and optimisation of vulnerability management processes.
• Conduct cyber risk assessments and provide recommendations to reduce identified risks.
• Review monthly vulnerability audits and work with stakeholders to ensure timely remediation.
• Monitor and test security controls to verify ongoing compliance and effectiveness.
• Support system administration activities relating to cyber security platforms and tools.
• Apply and maintain security controls including patching, access management and malware protection.
• Assist with security incidents, investigations and control testing activities.
• Develop and maintain security procedures, documentation and operational processes.
• Coordinate compliance reviews and support internal and external audit activities.
• Assist with the implementation of cyber security initiatives and system upgrades.
• Provide guidance on security requirements for internal projects and third-party services.

What sets you up for success

• Experience in cyber security, infrastructure security or vulnerability management within a complex IT environment.
• Hands-on experience with Rapid7 InsightVM (IVM) or similar vulnerability management platforms.
• Experience conducting vulnerability assessments, coordinating remediation activities and reporting on security risks.
• Strong understanding of cyber risk assessment methodologies and security control frameworks.
• System administration experience across Windows-based environments and security technologies.
• Knowledge of Active Directory, Group Policy, Microsoft Defender, Entra ID and related Microsoft security capabilities.
• Experience with security monitoring, control testing and compliance activities.
• Strong analytical and problem-solving skills with the ability to investigate and manage security issues.
• Excellent attention to detail and a disciplined approach to documentation, governance and process adherence.
• Strong stakeholder engagement skills with the ability to work effectively with technical and non-technical teams.
• A tertiary qualification in Information Technology, Cyber Security or a related discipline will be highly regarded.