drjobs Multiple Lead ICT Security Specialists EL1

Multiple Lead ICT Security Specialists EL1

Employer Active

1 Vacancy
The job posting is outdated and position may be filled
drjobs

Job Alert

You will be updated with latest job alerts via email
Valid email field required
Send jobs
Send me jobs like this
drjobs

Job Alert

You will be updated with latest job alerts via email

Valid email field required
Send jobs
Job Location drjobs

Canberra - Australia

Monthly Salary drjobs

Not Disclosed

drjobs

Salary Not Disclosed

Vacancy

1 Vacancy

Job Description

Location: ACT QLD VIC WA
LH01721
Security Clearance: Australian Citizen must be able to obtain Positive Vetting


Job Description:

ICT Security Specialists will exercise a considerable degree of independence and perform a subject matter expert role. They will exercise sound decision making and judgement to provide expert policy advice. They will have indepth knowledge of the ICT service delivery function and are responsible for the development implementation compliance and review of policies and procedures relevant to their work within that function area. They will engage in very complex problem solving and issues management and may coordinate and perform detailed or sensitive projects that impact on strategic political or operational outcomes for the agency.


Job Duties and Responsibilities may include:

  • Accountable for managing allocated resources setting work priorities and managing workflows to ensure accurate completion of work within timeframes and quality requirements.
  • Accountable for accurate completion of work within timeframes and quality requirements sharing own expertise with others and guiding and mentoring less experienced employees.
  • Lead the development and implementation of strategies and the evaluation of business outcomes to ensure continuous improvement in the delivery of ICT security.
  • Deliver risk assessments business impact analysis and assurance for information systems within the organisation.
  • Analyse security risks and business impacts and provide guidance on security strategies to manage identified risks.
  • Maintain knowledge skills and experience of general security issues and apply to IT security risk analysis.
  • Communicate risks of a complex nature to managers and other peers.
  • Engage with internal and external stakeholders from other technical specialties to share and develop ICT security policy.
  • Identify areas of risk and evaluate the adequacy and effectiveness of the Australian Signals Directorates approach to risk in the use of ICT.
  • Assess and resolve identified security incidents in accordance with established procedures and recommend any required actions or policy amendments.
  • Interpret security policy and contribute to the development of standards and guidelines.


Technical Skills:

  • Certified as an Infosec Registered Assessors Program (IRAP) Assessor
  • At least 3 years experience as a security specialist working across security architecture security and risk management communication and network security or security operations domains.
  • Experience ensuring technical systems adhere to Essential Eight ISM and PSPF frameworks
  • Excellent organisational and communication skills
  • Proven record building managing and enhancing relationships with stakeholders
  • Experience developing managing and implementing SOPs and procedures in support of security accreditation frameworks

Technical skills

Desirable: Bachelor s degree in Information Technology or related field


Requirements

Technical Skills:

  • Certified as an Infosec Registered Assessors Program (IRAP) Assessor
  • At least 3 years experience as a security specialist working across security architecture security and risk management communication and network security or security operations domains.
  • Experience ensuring technical systems adhere to Essential Eight ISM and PSPF frameworks
  • Excellent organisational and communication skills
  • Proven record building managing and enhancing relationships with stakeholders
  • Experience developing managing and implementing SOPs and procedures in support of security accreditation frameworks
Essential Criteria

1. SCAD 5 Security operations: Level 5 (SFIA) Monitors the application and compliance of security operations procedures. Reviews actual or potential security breaches and vulnerabilities and ensures that they are promptly and thoroughly investigated. Recommends actions and appropriate control improvements. Ensures that security records are accurate and complete and that requests for support are dealt with according to agreed procedures. Contributes to the creation and maintenance of policy standards procedures and documentation for security.
2. SCTY 5 Information security: Level 5 (SFIA) Provides advice and guidance on security strategies to manage identified risks and ensure adoption and adherence to standards. Contributes to development of information security policy standards and guidelines. Obtains and acts on vulnerability information and conducts security risk assessments business impact analysis and accreditation on complex information systems. Investigates major breaches of security and recommends appropriate control improvements. Develops new architectures that mitigate the risks posed by new technologies and business practices.
3. INAS 5 Information assurance: Level 5 (SFIA) Interprets information assurance and security policies and applies these to manage risks. Provides advice and guidance to ensure adoption of and adherence to information assurance architectures strategies policies standards and guidelines. Plans organises and conducts information assurance and accreditation of complex domains areas crossfunctional areas and across the supply chain. Contributes to the development of policies standards and guidelines.

Desirable criteria

1. PBMG 4 Problem management: Level 4 (SFIA) Initiates and monitors actions to investigate and resolve problems in systems processes and services. Determines problem fixes and remedies. Collaborates with others to implemented agreed remedies and preventative measures. Supports analysis of patterns and trends to improve problem management processes.
2. Our ideal candidates will bring the following attributes: Strong written and verbal communication skills; Desire to be accountable for their actions; Strong stakeholder management skills; Demonstrate leadership behaviours; Willing to challenge the traditional ways of doing business; Thrive in dynamic environments and comfortable with ambiguity; Outcomefocused mindset; and Adaptability resilience flexibility and teamwork including regionally dispersed teams if applicable. Please provide a brief explanation of your experience covering these attributes. (Guide 300 to 400 words.)


Essential criteria: 1. ITOP 5 - Provides technical leadership to optimise the performance of IT infrastructure. Investigates and manages the adoption of tools, techniques and processes (including automation) for the management of systems and services. Oversees the planning, installation, maintenance and acceptance of new and updated infrastructure components and infrastructure-based services. Aligns to service expectations, security requirements and other quality standards. Ensures that operational procedures and documentation are fit for purpose and kept up to date. Ensures that operational issues are identified, recorded, monitored and resolved. Provides appropriate status and other reports to specialists, users and managers. 2. DESN 5 - Designs large or complex systems and undertakes impact analysis on major design options and trade-offs. Ensures that the system design balances functional and non-functional requirements. Reviews systems designs and ensures that appropriate methods, tools and techniques are applied effectively. Makes recommendations and assesses and manages associated risks. Adopts and adapts system design methods, tools and techniques. Contributes to development of system design policies, standards and selection of architecture components. 3. HSIN 5 - Takes responsibility for installation and/or decommissioning projects. Provides effective team leadership, including information flow to and from the customer during project work. Develops and implements quality plans and method statements. Monitors the effectiveness of installations and ensures that appropriate recommendations for change are made. 4. SINT 5 - Plans and drives activities to develop organisational systems integration and build capabilities including automation and continuous integration. Identifies, evaluates and manages the adoption of tools, techniques and processes to create a robust integration framework. Provides authoritative advice and guidance on any aspect of systems integration. Leads integration work in line with the agreed system and service design. Assesses risks and takes preventative action. Measures and monitors applications of standards. Contributes to the development of organisational policies, standards, and guidelines for systems integration. Desirable criteria 1. Our ideal candidates will bring the following attributes: Strong written and verbal communication skills; Desire to be accountable for their actions; Strong stakeholder management skills; Demonstrate leadership behaviours; Willing to challenge the traditional ways of doing business; Thrive in dynamic environments and comfortable with ambiguity; Outcome-focused mindset; and Adaptability, resilience, flexibility and teamwork, including regionally dispersed teams, if applicable. Please provide a brief explanation of your experience covering these attributes. (Guide 300 to 400 words.)

Employment Type

Full Time

Report This Job
Disclaimer: Drjobpro.com is only a platform that connects job seekers and employers. Applicants are advised to conduct their own independent research into the credentials of the prospective employer.We always make certain that our clients do not endorse any request for money payments, thus we advise against sharing any personal or bank-related information with any third party. If you suspect fraud or malpractice, please contact us via contact us page.