Senior Information Technologist: Cyber Security GRC (HEO 7)

at  University of South Australia

• Based in Information Strategy and Technology Services (ISTS) at the Mawson Lakes campus
• Full-time (1.0 FTE), continuing position
• Starting salary: $96,696 per annum (plus 17% superannuation)

ESSENTIAL SKILLS AND EXPERIENCE

• Relevant tertiary qualification (normally a degree) or demonstrated equivalent knowledge, experience and skills and a commitment to ongoing professional development
• Extensive experience in developing policy and advising management in relation to IT security governance frameworks, best practice, processes, assurance activities and guidelines in a complex digital environment, incorporating key process and continuous improvement
• Extensive experience in the development and application of cyber security controls at the operating system, application and network levels in a complex information technology environment
• Comprehensive understanding and application of security principles and risk management frameworks such as NIST, ASD Essential 8, Information Security Manual (ISM) and Australian privacy principles
• Demonstrated high-level analytical and problem-solving skills
• Extensive experience in the management of responses to cyber security incidents
• Knowledge and experience in the application of Cyber Security and Risk Management Frameworks

Reporting to the Manager: Cyber GRC, you will provide expertise and assistance in proactively implementing the program of cyber assurance services across the University’s IT environment. You will assist in delivering cyber security risk management, governance practices and assurance programs for the University in line with industry cyber security best practice. You will provide leadership within, and be responsible for, the comprehensive cyber defence of the University’s digital assets. You will support the Manager: Cyber GRC to educate staff in awareness of cyber security issues, ensuring that staff are trained in good cyber security practice and are managing data in accordance with the University’s data classification policy.