Senior Information Security Analyst

at  Computershare

LOCATION: MELBOURNE (HYBRID)

This role is a hybrid position based in our Melbourne office. We’re committed to your flexibility and wellbeing and our hybrid strategy currently requires three days a week in the office, giving you the option to work remotely for some of your working week. Find out more about our culture of flexible working .

A ROLE YOU WILL LOVE

We have an opportunity for a Senior Information Security Analyst to provide information security consultancy recommendations & advice to the many Computershare Business units both non-technical & technical in response to Client questions and decisions regarding Security policies. This role will have a strong Assurance focus supporting the Regional Information Security team with the delivery of work such as ISO27001, along with the development, implementation, maintenance and enhancement of all regional information security related activities, this will require an ability to influence and engage with senior leaders and other key internal stakeholders.
As part of the extended Global Information Security Group, you will work within the Australia / New Zealand region and other regions as required. Participation in conference calls outside standard office hours and some travel may also be required.

SOME OTHER KEY RESPONSIBILITIES:

• Delivering key security assurance services, such as ISO27001, Client Due diligence support on RFI’s, Client Audits and Contract reviews.
• Supporting the development and execution of the wider Information Security Consultancy program.
• Developing effective working relationships within the wider Security team and other Business Units.
• Delivering a portfolio of regional information security services including consultancy, projects (technical & non-technical) and other assurance work such as Control Testing.
• Contributing to the implementation of regional and global projects and initiatives.
• Providing technical and non-technical information consultative support and guidance to regional business units to ensure compliance.
• Actively championing and raising awareness about the Global Information Security group’s role, objectives and initiatives.
• Assisting with the facilitating of Domain Management, Firewall Rule reviews, and providing advice / assessment of the risk/consequences around security controls.

WHAT WILL YOU BRING TO THE ROLE?

This role plays an important part in protecting Computershare’s data, others’ data it is responsible for and reputation so you will have excellent attention to detail and are passionate about influencing stakeholders to ensure that security standards of our suppliers are scrutinised to the highest level.

• Proficient understanding of security standards (ISO27001, OWASP, NIST, CIS, CPS234 & Essential 8).
• Proven experience (2 - 4 years) in an information security, security governance or relevant technical IT function (application development / infrastructure) or security consultancy environment.
• Excellent verbal and written communication skills with the ability to effectively articulate complex technical terms to both technical and non-technical audiences.
• Ideally have or in the process of obtaining, a professional information security certification including ISO/IEC 27001 Internal Auditor, CRISC, CISM CISSP.
• Excellent time, resource, and project management skills.
• Ability to work across multiple geographical borders and time zones.
• Strong analytical skills and ability to resolve complex security vulnerabilities and design compensating controls.
• Ability to convey possible risks in relation to evaluate the results penetration testing, provide diagnosis of results and assess the risks / consequences to both technical and non-technical people.

If this sounds like a role and organisation, you’d love to be part of, apply today!