Senior Security Assurance Analyst

at  NSW Corporate Services

KEY KNOWLEDGE AND EXPERIENCE

• Proven experience in vulnerability management, including use of vulnerability management tools for scanning and patch management. Familiarity with penetration testing methodologies and processes is highly desirable.

ABOUT US

The Department of Planning, Housing and Infrastructure (DPHI) improves the liveability and prosperity of NSW. To achieve this, we: create vibrant, productive spaces and precincts; manage lands, assets and property effectively and deliver affordable and diverse housing. We strive to be a high-performing, world-class public service organisation that celebrates and reflects the full diversity of the community we serve and builds the cultural capability of our department to improve outcomes with and for Aboriginal people, communities and entities.
We are an inclusive and accessible workplace, where your individual contributions are valued, and where everyone is encouraged to feel a sense of connection and belonging. DPHI supports various employee affinity groups, practices flexible working, offers job share and workplace adjustments.

THE ROLE

As a Senior Security Assurance Analyst this role will lead information security assurance activities across the Department of Planning, Housing and Infrastructure by providing technical security expertise to ensure that existing and new ICT systems, services, and products meet the security compliance requirements. This may include assisting on key security projects and BAU security roles.
This role is responsible for monitoring the effectiveness of implemented security controls and determining deviations from acceptable configurations, policy, or standards, and providing expertise in risk treatment management and compliance requirements for internal and external reviews of requirements.
For more information read the full Role Description: Senior Security Assurance Analyst

WHAT YOU WILL BRING TO THE ROLE

• Detailed understanding of vulnerability management prioritisation frameworks
• Understanding of and exposure to typical assurance activities e.g., penetration testing, red teaming, audits, third party assessments
• Knowledge of the NSW Government compliance requirements and other security frameworks and standards such as Australian Signal Directorate (ASD), the Australian Government Protective Security Policy Framework, and ISO/IEC 27001
• Strong problem-solving abilities to navigate complex challenges and adapt to evolving situations
• Proven leadership qualities, including the ability to motivate and inspire others to achieve shared goals
• Demonstrated flexibility and adaptability to thrive in a fast-paced and dynamic work environment
• Enjoys autonomy and demonstrates proficiency in working independently, taking initiative, and making decisions.