Information Security Officer

at  Class Super

A BIT ABOUT US

HUB24 Group (ASX:HUB) leads the wealth industry as the best provider of integrated platform, technology and data solutions, and we’re not done yet. At HUB24, we believe in the value of advice and by collaborating with the industry and leveraging our technology and data expertise, we’re helping to solve key challenges to enable the delivery of accessible financial advice and empower better financial futures for more Australians.
Our solutions include Australia’s best platform HUB24, leading SMSF software Class, and myprosperity’s innovative client portal technology.
HUB24 Limited is a company listed on the Australian Securities Exchange (ASX: HUB)
The Information Security Officer is responsible for ensuring the Information Security Management System operates effectively to support the growth of the business whilst managing risk within agreed tolerances.

SKILL REQUIREMENTS:

• 1-4 year’s working experience in Information Security
• Familiarity of security and risk-related standards or frameworks such as ASD8, NIST, ISO, GDPR
• Bachelor’s Degree or relevant work experience and/or ISO27001 Lead Implementer/Auditor, CISM, CISA, CRISC a plus
• Understanding of the Financial Services Sector is desirable.
• Capable of driving execution and influence stakeholders in teams and locations disbursed interstate.
• Ability to work and adjust to changing focus and priorities. Must be able to successfully execute with multiple, competing priorities.
• Previous experience in implementing or maintaining an ISMS as governed by the ISO 27001 standard.
• Previous experience in implementing awareness programs and participating in security audits
  $80,000 - $100,000 a year

• Maintain ISMS across HUB24 Group by developing and managing Policies, Standards, Guidelines and Processes as related to the Information Security Framework.
• Lead liaisons with key internal and external stakeholders to ensure compliance with PCIDSS, ISO27001, ASAE3402, ATO OSF,CPS 234,
• Privacy Act and internal frameworks.
• Lead implementation of information security strategies, risk management framework and maintain risk registers across the Group.
• Lead information security education and awareness training initiatives for all employees, contractors and suppliers as applicable.
• Conduct compliance readiness assessments and assurance activities against policies and standards requirements.
• Lead and ensure timely responses to external audits, client reviews and attestations.
• Ensure information security improvement actions, and audit findings are evaluated, validated and implemented as required.
• Conduct third party security assessments against internal and industry standards.
• Continuously lead Controls Improvement.
• Assist with preparing reports to measure and track the effectiveness of ISMS.
• Assist with incident response planning- Business continuity planning, Security Incidents, Disaster Recovery.
• Assist with coordinating and investigating security incidents.
• Work collaboratively, share responsibilities, provide support to other team members as required.
• Provide timely and accurate reporting, including updates to the line manager. In addition, support and assistance to the line manager as required.