Lead Cyber Security and Systems Expert

The role of Lead Cyber Security and Systems Specialist is crucial in maintaining the confidentiality, integrity, and security of an organisation's information and systems.

Key responsibilities include designing, implementing, administering, and monitoring ICT security, as well as evaluating Council systems. This position also involves supervising ICT security audits (internal and external) and leading the Cyber Security, Risk and Analyst Team.

The successful candidate will be responsible for leading and maintaining the confidentiality, integrity, and security of an organisation's information and systems. They will contribute to the design, implementation, and maintenance of systems, requiring a synergy of leadership, administrative, and technical expertise, analytical skills, and effective communication.

This role entails identifying, designing, implementing, administering, supporting, and using Councils cyber security, risk management, and monitoring systems and procedures. The position requires key partnerships in business continuity, disaster recovery, and incident response.

The Lead Cyber Security and Systems Specialist will supervise and engage in cyber security audits (internal and external) to ensure the access, authorisation, and accountability of an organisation's systems remain optimal. They will liaise with various stakeholders for threat intelligence, risk assessment, vulnerability identification, and management, as well as cyber control maturity and assurance.

This role is recognised as a critical position within the Technology, Infrastructure, and Security Operations team. The specialist will work closely with the Infrastructure and Operations Manager to plan, develop, and operate robust and secure infrastructure and technologies.

• Qualifications and/or experience in Information Technology, System Administration, Information Risk and Cyber Security, and IT Network Administration.
• Demonstrated capacity to provide cyber leadership for project initiatives and operations, and collaborate with the ICT team to assess, prioritise, and plan maintenance and remediation for an organisation's various business systems and information against and from cyber security threats.
• Ability to prepare documentation including procedure, technical, and presentations with excellent communication, interpersonal, presentation, and written communication skills.
• Capacity to work in a flexible and timely manner as a team player and adapt to fluctuating workloads and changing priorities.
• Ability to investigate issues, analyse threats, conduct a root-cause analysis, and resolve system and cyber security issues and solve incidents, issues, and problems.
• Capacity to conduct detailed system and cyber threat analyses, including the evaluation of existing and onboarding systems, and identify weaknesses and vulnerabilities.
• Ability to develop and implement strategies to defend and recover against cyber threats and maintain business continuity.
• Capacity to coordinate with other IT professionals to improve security.
• Knowledge of cybersecurity, control, and risk frameworks such as NIST, ISO 27001, Essential8, and/or CIS Controls.
• Ability to oversee the deployment of awareness and training and guidance to staff on cybersecurity best practices.
• Capacity to monitor an organisation's networks for security breaches and investigate violations when they occur.
• Ability to install and use software, such as vulnerability assessment tools, audit software, governance software, and data encryption programs.

Contract position up to one year, 70 hours per fortnight

Flexible working hours available

Mobile Telephone provided

Laptop provided

Enquiries regarding the position should be directed to John Marchiori