ABOUT THE ROLE

You will be responsible for planning, assessing, designing and implementing security solutions and controls to maintain and improve the information security posture for Standards Australia, ensuring appropriate controls are in place, and aligned to our IT and security strategy.
This role is a salaried, full-time, 12 month fixed-term contract.

WHAT YOU’LL DO

• Assess, design, and implement appropriate cyber security controls and solutions as part of the cyber security uplift program
• Perform threat modeling to identify potential security threats and vulnerabilities in architectural designs and develop and implement mitigation strategies to address identified risks
• Work collaboratively with IT solution architects and other stakeholder to assess, design and implement security controls as part of projects and initiatives
• Oversee the deployment of security solutions, ensuring they are properly configured and optimised
• Create solutions that security architecture which aligns with enterprise security architecture frameworks and industry standards and framework (e.g. NIST, ISO27001) and supports with overall business and security strategy
• Conduct regular reviews and updates of security frameworks to ensure ongoing compliance and effectiveness
• Vulnerability management and threat intelligence
• Conduct security and risk assessments in collaboration with internal and external stakeholders
• Provide security/architecture expertise, direction, and assistance to other areas of the business
• Stay updated with the latest security trends, technologies, and best practices in security architecture
• Research and evaluate new security tools and technologies to enhance architectural designs
• Recommend and implement innovative security solutions to address emerging threats
• Collaborate and input to the organisational security strategy
• Maintain comprehensive documentation of security architectures, including diagram, design decisions and configurations (technical specifications)
• Assist with security operations as required