Cyber Security Analyst

**About Southern Ports**
Southern Ports was formed in 2014, following the amalgamation of the Ports of Albany, Bunbury and Esperance all of which play an important role in connecting Western Australia with trade products from around the world. The company employs approximately 250 staff across four locations: Albany, Bunbury, Esperance and West Perth. At Southern Ports, we value the safety of our employees and all others who attend our sites. We strongly believe in accountability, integrity and solid teamwork between all employees, departments and sites. Southern Ports is future focused, looking to develop and improve all aspects of the business to advance as a smart and sustainable company while maintaining and respecting our history. Our Vision: Strong Regional Ports, Strong Regions.

**About the Role**
Reporting to the IT Manager, the Cyber Security Analyst will play a key role in ensuring Southern Ports technology landscape remains secure in its digital transition journey. The role will provide technical advice relating to security standards, strategies, emerging technologies.

The Cyber Security Analyst will use their knowledge and experience to help ensure Southern Ports systems are safeguarded from ongoing threats and complying with relevant state and federal security requirements. In addition to cyber security triaging and incident response, the role will also be the primary contact in relation to cyber security audit obligations for Southern Ports.

**Key Duties**
- Ensure necessary security controls are in place and operating as expected across the technology landscape of Southern Ports.
- Review and monitor privileged user access.
- Vulnerability scanning within Southern Ports networks.
- Stay up to date with cyber security threats, trends, attack vectors and techniques.
- Be a champion for positive cyber security practices and awareness within Southern Ports and outside of Southern Ports in relation to customers, vendors, and partners.
- Investigate and respond to cyber incidents and cyber alerts.
- Liaise with third party stakeholders such as vendors and government departments in response to a cyber incident.
- Point of contact for cyber security audit and compliance requirements.
- Management of cyber security risk register.
- Assist with the development of security policies, procedures, projects and strategies.
- Maintain and improve the cyber security maturity level of Southern Ports.
- Engage with state and federal cyber security bodies to participate in whole of government cyber security activities.

**Expertise**
- Tertiary qualifications in IT or equivalent are desirable.
- A minimum of five (5) years’ relevant industry experience in cyber security or similar role
- Broad technical background in areas such as operating systems, firewalls, vulnerability management and network security.
- Demonstrated experience in Application Control
- Experience with Microsoft Sentinel, Microsoft Defender and Web Application Firewall is desirable
- Experience with SCADA and Operational Technology (OT) and advantage.
- Strong knowledge of the ASD Essential Eight controls
- Strong knowledge of frameworks and standards such as ISO 27001, OWASP, NIST
- Understanding of the MITRE ATT&CK framework.
- Excellent written and verbal communication skills; ability to convey information in a clear, concise manner
- Excellent technical knowledge and well developed analytical and critical thinking skills
- Current minimum C Class drivers’ license

**Requirements**:
To be eligible for this two (2) year fixed term role, applicants must reside in or be willing to relocate to Albany, Bunbury, Esperance or Perth and provide proof of Australian citizenship or permanent residency. The successful applicant must be able to obtain and maintain a Maritime Security Identification Card and undergo a pre-employment medical assessment including drug and alcohol testing.