Cybersecurity Risk Manager
1 month ago
We’re inventing the future, right here, right now, at Thales. We design the critical security solutions of tomorrow by combining the curiosity to explore, the intelligence to question and the vision to create. Together we solve complicated problems by combining our experience in the market with our leading research and development capabilities.
A great opportunity has become available for an experienced **Cybersecurity Risk Manager **to join the renown safety and mission critical OneSKY program.**
The Cybersecurity Risk Manager role supports the delivery of the CMATS air-traffic management system in Australia, which is part of the OneSKY program. CMATS is a complex system and you work in a complex and challenging environment that employs well-defined system engineering processes to ensure fit for use and fit for purpose. In this role you actively manage the cyber risk of the CMATS solution through identification and evaluation of relevant risks in the context of threat sources, vulnerabilities, existing controls, business impact, and target security accreditations.
**KEY ACTIVITIES AND RESPONSIBILITIES**
As a Cybersecurity Risk Manager, you managing cyber risk through the following activities:
- Perform cyber risk assessments, capture and analyse all security requirements, and determine applicable security controls, and develop a threat model based on an agreed list of threat sources and events.
- Identify system, segment, component, and product vulnerabilities, and their impact on the CMATS solution and customer, and develop remediation strategies as appropriate.
- Monitor the effectiveness of remediation strategies and periodically update the security risk register.
- Create and maintain key cyber engineering and accreditation documents such as the Security Accreditation Plan, System Security Plan (SSP), Security Risk Management Plan (SRMP), the Threat and Risk Assessment (TRA), the security risk register, and other relevant contractual documents.
- Produce engineering design artefacts in relation to mitigation strategies including design considerations, design constraints, or design decisions that impact the overall solution design of CMATS.
- Support project IV&V activities, including the Certification and Accreditation phases in which the residual security risks are monitored and appropriately tested and assured, using agreed remediation strategies including penetration tests.
- Present the identified security risks, the analysis conducted to demonstrate effectiveness of proposed risk remediation strategies, and the proposed solutions to customer representatives during the Security Working Groups (SWG).
- Provide advice to internal and external customers on security risks of the CMATS system.
- Liaise with the appropriate federal government security organisations, customer representatives, certification authorities, and relevant service providers.
- Work with other project team members to develop cost and schedule estimates.
- Attend and actively participate in internal and external technical reviews.
**SKILLS & EXPERIENCE**
- Excellent knowledge of the Australian Government Information Security Manual (ISM) and PSPF, and accreditation requirements.
- Working with formal risk management methodologies and documents.
- Contemporary security solutions in heterogeneous environments (Linux and Windows) using a range of technologies and products
- Participating in end-to-end engineering processes with documented traceability
- Authoring and reviewing technical documentation
- Strong presentation and verbal communications and liaison skills
**QUALIFICATIONS**
- Bachelor-level qualification or higher in Information Security (or equivalent demonstrated experience)
- CISSP, CISM, SANS GIAC, SABSA, or similar professional security certifications
**SOME OF OUR GREAT BENEFITS**
- Competitive base salary + Super + Bonus
- Paid health insurance for you and your family
- Employee discounts with a number of affiliates (Travel, Car hire, Tech)
- Access to Fitness Passport
- Modernised Paid Parental leave
- Veterans Leave
Wellbeing matters at Thales, and where possible we encourage flexible working.
-
Cybersecurity Risk Manager
2 weeks ago
Melbourne, Victoria, Australia Thales Full timeWe're inventing the future, right here, right now, at Thales. We design the critical security solutions of tomorrow by combining the curiosity to explore, the intelligence to question and the vision to create. Together we solve complicated problems by combining our experience in the market with our leading research and development capabilities.A great...
-
General Manager Cybersecurity, Technology Risk
3 weeks ago
Melbourne, Australia John Holland Full timeMelbourne, VIC, AU, 3000**About John Holland**: At John Holland, our purpose is simple, we transform lives with everything we do. We’ve always known at its heart infrastructure is about people — our customers, our employees, and the communities in which we work. That’s our difference. Deep experience and capability with a genuine care about creating...
-
Melbourne, Australia John Holland Full timeMelbourne, VIC, AU, 3000**About John Holland**: At John Holland, our purpose is simple, we transform lives with everything we do. We’ve always known at its heart infrastructure is about people — our customers, our employees, and the communities in which we work. That’s our difference. Deep experience and capability with a genuine care about creating...
-
Melbourne, Victoria, Australia John Holland Full timeMelbourne, VIC, AU, 3000About John Holland:At John Holland, our purpose is simple, we transform lives with everything we do. We've always known at its heart infrastructure is about people — our customers, our employees, and the communities in which we work.That's our difference. Deep experience and capability with a genuine care about creating better lives...
-
Melbourne, Victoria, Australia John Holland Full timeGeneral Manager Cybersecurity, Technology Risk and AuditAt John Holland, our purpose is simple, we transform lives with everything we do. We've always known at its heart infrastructure is about people — our customers, our employees, and the communities in which we work.That's our difference. Deep experience and capability with a genuine care about creating...
-
Cybersecurity Consultant
2 weeks ago
Melbourne, Victoria, Australia Datacom Full timeOur WhyDatacom works with organisations and communities across Australia and New Zealand to make a difference in people's lives and help organisations use the power of tech to innovate and grow.About the Role (your why)Our Cybersecurity team are passionate, driven, and inclusive. We work hard, together, and will always make time to help each other learn and...
-
Cybersecurity Consultant
4 weeks ago
Melbourne, Australia Datacom Full timeOur Why Datacom works with organisations and communities across Australia and New Zealand to make a difference in people’s lives and help organisations use the power of tech to innovate and grow. About the Role (your why) Our Cybersecurity team are passionate, driven, and inclusive. We work hard, together, and will always make time to help each...
-
Cybersecurity Manager
2 weeks ago
Melbourne, Victoria, Australia Akaysha Energy Full timeSecurity (Information & Communication Technology) Join Akaysha Energy, a driving force behind Australia's renewable energy revolution. As a subsidiary of BlackRock's Global Renewable Power Fund, we are at the forefront of developing, financing, and operating transformative energy storage and renewable projects. Harness your passion for the climate and join...
-
Cybersecurity Lead
7 days ago
Melbourne, Australia Thales Full timeWe’re inventing the future, right here, right now, at Thales. We design the critical security solutions of tomorrow by combining the curiosity to explore, the intelligence to question and the vision to create. Together we solve complicated problems by combining our experience in the market with our leading research and development capabilities. **Our...
-
CyberSecurity Intern
2 weeks ago
Melbourne, Victoria, Australia SECOMPASS Australia Pty Limited Full timeJob DescriptionWe work with research institutes to provide our customers with innovative Security and Privacy solutions in AI & Big data, Blockchain, Crypto and IoT. The other SeComPass services are:Development of Security Strategies, Enterprise Security and Privacy ArchitecturesLeading Security and Privacy transition/migration programsPerforming Security...
-
Head of Cybersecurity
3 weeks ago
Melbourne, Australia Mercy Health Full timeLocation: Melbourne | Eastern Metropolitan Job type: Full time Organisation: Mercy Health **Salary**: Salary not specified Occupation: IT and Telecommunications Reference: 20534 **ABOUT THE ROLE** The Head of Cybersecurity is the senior IT leadership role responsible for management of the Information Security function of Mercy Health including...
-
CyberSecurity Intern
2 weeks ago
Melbourne, Australia SECOMPASS Australia Pty Limited Full timeJob DescriptionWe work with research institutes to provide our customers with innovative Security and Privacy solutions in AI & Big data, Blockchain, Crypto and IoT. The other SeComPass services are:Development of Security Strategies, Enterprise Security and Privacy ArchitecturesLeading Security and Privacy transition/migration programsPerforming Security...
-
Cybersecurity Engagement Manager
6 days ago
Melbourne, Australia Capgemini Full time**About Capgemini** Capgemini is a diverse collective of more than 350,000 strategic and technological experts based across more than 50 countries, partnering with world-renowned clients to transform and manage their businesses. We are dedicated to leveraging cloud, data, AI, connectivity, software, digital engineering, and platforms to address the entire...
-
Security Manager
2 weeks ago
Melbourne, Australia Michael Page Full timeExciting opportunity to be part of a high profile organisation in Abu DhabiMust have Physical Security and Cybersecurity experienceAbout Our ClientA very successful organisation setting up their offices in Abu Dhabi.Job Description Lead the implementation of physical security measures, including CCTV systems, access control systems, and visitor management...
-
CyberSecurity Intern
7 days ago
Melbourne, Australia SECOMPASS Australia Pty Limited Full timeWe work with research institutes to provide our customers with innovative Security and Privacy solutions in AI & Big data, Blockchain, Crypto and IoT. The other SeComPass services are:Development of Security Strategies, Enterprise Security and Privacy ArchitecturesLeading Security and Privacy transition/migration programsPerforming Security and Privacy...
-
Cybersecurity Advisor
2 weeks ago
Melbourne, Victoria, Australia AGL Energy Full timeAs the needs of our customers change, so do we.At AGL, we believe progress is powered by our people.If you're set on making real change for tomorrow, we have the scale, resources and ambition to get it started today.Now's an extraordinary time to work with us. We're taking the lead on renewables and expanding our products to make them more sustainable,...
-
Service Delivery Manager
7 days ago
Melbourne, Australia Triskele Labs Full timeAbout Us:Triskele Labs are dedicated to providing top-tier cybersecurity services to protect our clients from the ever-evolving landscape of cyber threats. As a boutique firm based in Australia, we pride ourselves on our personalized approach and deep commitment to our clients. Our team of experts works tirelessly to deliver tailored security solutions that...
-
Melbourne, Victoria, Australia Talent International Full timeJob Details:LocationMelbourneSalaryplus bonusJob TypeFull TimeRefBBBH96215_ ContactKylie McManusPostedabout 3 hours agoOpportunityOur ASX listed Client has experienced a doubling in EBIDTA in the past financial year and has a solid platform for growth and expansion into new territories. A leader in the resources sector, with headquarters in Melbourne and...
-
Cybersecurity Lead
2 months ago
Melbourne City Centre, Australia Energy Safe Victoria Full timeAbout Energy Safe Victoria (ESV) Our purpose is to keep Victorians energy safe and ensure energy is used confidently. Through education, regulation and enforcement, we work to ensure that energy safety, supply and efficiency are a priority in Victoria and something our customers can be confident in. Our people come from a wide range of professions with...
-
Cybersecurity Lead
4 weeks ago
Melbourne City Centre, Australia Energy Safe Victoria Full timeAbout Energy Safe Victoria (ESV) Our purpose is to keep Victorians energy safe and ensure energy is used confidently. Through education, regulation and enforcement, we work to ensure that energy safety, supply and efficiency are a priority in Victoria and something our customers can be confident in. Our people come from a wide range of professions with...
