Cyber Security Team Lead

**Job Details**:
**Location**

Fortitude Valley

**Salary**

Negotiable

**Job Type**

Full Time

**Ref**

BBBH99341_1677811080

**Contact**

Samantha Nielson

**Posted**

about 6 hours ago

Talent International is searching for an experienced **Cyber Security Team Lead** to join our Utilities client. This role is based in **Fortitude Valley** on a permanent basis.

**About the role**:
You'll be responsible for the day-to-day Cyber Security operational services in line with the guidelines and structure defined by our Information Security Management System (ISMS). You will play a key role in delivering the Cyber plan as defined by the GM Cyber and ICT Operations and the Executive team and working closely with the Cyber Security Project Delivery function.

**Responsibilities**:

- Coordinate and maintain the client's ISO 27001 certification as part of their governance and risk assurance activities, including maintaining appropriate Information Security policies and associated standards in partnership with senior ICT leaders, operational leaders and Risk and Resilience teams to support risk reduction targets.
- Monitor the day-to-day performance of our outsourced managed security service provider in partnership with other operational leads and with the support of the GM Cyber and ICT Operations.
- Prepare audit reports and responses as needed that involve the cyber security function.
- Create interactive and engaging approaches to working with line managers to drive employee maturity around cyber security behaviours.
- Build and maintain cyber security awareness training materials for staff and maintain the compliance registers for this training.
- Operational management of the third-party cyber risk management process (TPRM) and associated framework compliance.
- Ensure record keeping and sensitive data is stored and disposed in accordance with legislative requirements.
- Act as the cyber security incident manager where required in partnership with other operational leaders and run lessons learned and root cause analysis exercises to ensure a thorough incident management lifecycle is in place.
- In partnership with Information leaders monitor compliance of the client's implementation of the Information security classification framework (QGISCF) and Data Encryption standards as part of QG:IS18 and drive maturity with other operational teams through effective stakeholder management to address identified gaps.
- Contribute to enhancements in Business Continuity planning across the enterprise and model best practice to other business units.
- Create and maintain the client's wide security response plans and playbooks.
- Create and maintain executive friendly reporting on information security maturity and compliance for the Information Security Management Committee.
- In partnership with architects and other leaders assess new enterprise information systems and SaaS suppliers for compliance with agreed standards and controls.
- Positively promote and actively role model the client's values and behaviours to support the delivery of their services.

**Requirements**:
Mandatory:

- Bachelor's degree in business, computer science, computer engineering or related field of study
- 5 + years' experience in technology
- 2 + years' experience in Cyber security
- Previous experience leading a small team of security analysts as part of the above
- Experience with QG:IS18 standard and knowledge of the Security of Critical Infrastructure (SOCI) act.
- Formal industry certification including any of these: Certified Information Systems Security Professional (CISSP) by (ISC)², Certified Information Systems Analyst (CISA) by ISACA, Cybersecurity Analyst Professional Certificate by IBM, Certified Information Security Manager by ISACA or Security+ by CompTIA+; or equivalent demonstrated experience.

**How to Apply**: