Level 3 Cyber Security Advisor

About Woodside Energy

We are a global energy company providing reliable and affordable energy to help people lead better lives. Join our team at Woodside Global Solutions in Bengaluru where talent digital expertise and operational excellence converge to solve complex energy challenges accelerate change and reimagine business capabilities to support Woodsides global operations and our role in the energy transition.

Founded in 1954 Woodside established the liquefied natural gas (LNG) industry in Australia 40 years ago and supplies customers around the globe. 70 years on Woodside continues to be driven by a spirit of innovation and determination.

At Woodside we know great results come from our people feeling valued getting the support they need to reach their full potential and working in a psychologically and physically safe work environment. We believe in nurturing talent and providing opportunities for continuous learning and career advancement.

Refer to our corporate website for more information about our different locations and projects: What We Do

About Woodside Global Solutions

Woodside Global Solutions in Bengaluru is being built as a hub of excellence to drive innovation digital transformation and global collaboration.

Working as one Global team the Woodside Digital team is a trusted partner driving transformation within the organisation. We are bold in our ambitions and resolute in our actions. Through cutting-edge AI robust cyber security and advanced data solutions we drive innovation and influence every part of our business.

We are looking for talented professionals who are passionate about technology and eager to make a global impact helping to shape the future of Woodside together.

About the role

Our Cyber mission is to safeguard people brand and reputation across IT and Operational Technology. We aim for transparency and proactive cyber risk management.

The Cyber team is responsible for creating a consistent cyber culture across the Global Cyber team and driving the strategic uplift of cyber capability across the Woodside business. Our team partners closely with our CISO and Cyber teams Cyber Service Line owners and our Digital Service Centre Lead team with operations situated in Australia and North America to ensure safe reliable global operations. We work together to maintain Woodsides secure digital environment in support of our mission.

As a Cyber Security Advisor in Bengaluru you will report to the Team Lead Cyber Risk and Compliance in Bengaluru and help shape Woodsides global solutions and future capabilities. This is a senior technical role responsible for coaching Associate Cyber Security Advisors and leading the delivery and continuous improvement of Cyber Risk and Compliance services primarily (but not limited to):

• Cyber Security Assessments (IT projects suppliers existing technologies and business processes).

• Cyber Advisory (establish and main effective relationships with key stakeholder groups develop cyber security architecture patterns and guidance materials articulate security standards and requirements during engagements supporting cross-functional technology and business teams).
  

Duties & Responsibilities:

• Influence cross-functional technical resources to ensure alignment prioritisation and delivery against agreed roadmaps.

• Provide expert guidance to new technology initiatives ensuring threats and risks are understood security patterns are applied and gaps are identified and transparently managed.

• Build capability within the Cyber Security team by mentoring coaching and guiding junior staff.

• Develop and maintain relationships across Digital and within the Business to support and enable Digitals business strategy and priorities.

• Responsible for working in partnership key stakeholders to gain a deep understanding of gaps issues and support the prioritisation of these over the short medium and long term.

• Champion cyber security across Digital and the business helping service line managers and stakeholders understand own and manage cyber risks relevant to their platforms.

• Provide technical leadership in relation to the delivery and continuous improvement of global Cyber Risk and Compliance capabilities (People Process and Technology) - e.g.

• Governance forums processes and reporting linked to relevant activities

• Cyber security risk and compliance assessment processes

• Ongoing cyber assurance planning scoping and coordination

• Advisory and internal consulting relating to implementing standards and requirements

• Security architecture patterns and technical guidance supporting standards

• Supplier cyber risk management and assurance

• Cyber security control design and operating standards

• Cyber security control testing and verification

• Ensure compliance of all standards processes security and technical change management

• Provide expert security architecture input into relevant cyber and digital activities

• Contribute to standards processes and guidelines

• Provide expert quality assurance and advice

• Foster and develop external relationships with cloud services providers

• Contribute to developing a cyber security team that is seen as experts in meeting the mission of protecting Woodsides people brand and reputation

Skills & Experience:

• Relevant Cyber Security or Computer Science tertiary degree (or equivalent qualification)

• Desirable: Industry recognised certifications relevant to cyber security architecture governance risk and compliance audit etc. (SABSA TOGAF CISSP CCSP CISM CISA Microsoft/AWS cloud certifications).

• 8-10 years combined experience in cyber security solution architecture systems engineering or related cyber security roles.

• Desirable: Experience working with Operational Technology / Industrial Control Systems

• Desirable: Experience in relevant industries (e.g. natural resources and utilities sectors)

• Exceptional written and verbal communication with the ability to influence without authority and engage effectively with stakeholders at all organisational levels.

• Demonstrated experience developing strong trusted relationships across Digital business units and external partners.

• Strong requirements-gathering and analytical skills able to convert business and operational needs into actionable security architecture outcomes.

• Proven ability to succinctly communicate complex cyber risks and design considerations to non-technical stakeholders and leadership.

• Ability to translate threat and risk insights into clear design decisions risk treatments and patterns that align with enterprise risk tolerance.

• Strong knowledge of industry cyber security frameworks such as ISO 27001 NIST CSF IEC 62443 experience embedding these into architecture decisions.

• Experience ensuring compliance with security standards technical change processes and architecture governance.

• Deep experience applying core security design principles including Zero Trust RBAC least privilege network segmentation secure egress and NAC.

• Experience integrating enterprise security tools and platforms such as Microsoft E5 security capabilities (Defender Purview Intune Conditional Access) and Identity & Access Management tools (Entra ID/Azure AD Saviynt Zscaler)

If you think you can do this job but dont meet all the criteria thats OK! Please apply. At Woodside we value people with diverse experiences and backgrounds as they provide unique perspectives that help us innovate.

Recognition & Reward:

What you can expect from us:

• Commitment to your ongoing development including on the job opportunities and formal programs

• Inclusive parental leave entitlements for both parents

• Values led culture

• Flexible work options

• Generous annual leave sick leave and casual leave

• Cultural and religious leave with flexible public holiday opportunities

• A competitive remuneration package featuring performance based incentives with uncapped Employer Provident Fund

Woodside is committed to fostering an inclusive and diverse workforce culture which is supported by our Values. Inclusion centres on all employees creating a climate of trust and belonging where people feel comfortable to bring their whole self to work. We also offer supportive pathways for all employees to grow and develop leadership skills.