Technology - Energy and Natural Resources Sector

**Job Description
**Manager to Director - Technology

Come and be part of this evolution and a dynamic, fast growing, market leading organisation who are passionately committed to helping our clients succeed in rising to this challenge

We currently have exciting opportunities across our Technology divisions

**How are you Extraordinary?
**We are seeking individuals at the Manager, Associate Director and Directorlevel to join our Tech Divisions, with the below skillsets:
**Energy and Natural Resources sector.
- A proven ability to undertake the responsibilities and requirements of the role, as listed above.
- Experience working within complex client environments in IoT/IIoT.
- A proven ability to understand and define the value chain and competitive environment of a client's business within the Energy and Natural Resources sector.
- Ability to bring a hybrid set of skills and insights across digital, technology and cyber security
- Prescribe the program roadmaps to deliver target state solution designs encompassing business and technology needs.
- Develop and articulate innovative cyber security strategies to C-suite stakeholders using emerging technology to deliver business outcomes and new business models.
- Conduct complex analysis and structured problem solving, resulting in pragmatic and executable recommendations to clients.
- Excellent interpersonal and communication skills.
- Pragmatism, naturally collaborative and the ability to simplify complex situations
- Presence and highly effective relationship building skills with business execs
- Strong people leader
- Digitally savvy with a passion for new technology
- Ability to manage your own time and of others effectively to meet client deadlines.
- A disciplined approach to problem solving and an ability to critically assess a range of information to differentiate true business needs as opposed to user requests

**Security Strategy & Governance
- Impeccable written and very strong verbal communication skills.
- One or more of the following certifications - CISSP, CISM, Certified Cloud Practitioner, AWS Certified Security - Specialty, Microsoft Azure Security Technologies [AZ-500], ISO/IEC 27001:2013 Lead Auditor, and IRAP.
- Experience in Performing gap assessments between the security processes and operations of our clients against recognised global and domestic standards and regulations (e.g. ISO 27001, NIST CSF, APRA CPS 234).
- The ability to prepare or oversee the preparation of very high-quality client-ready deliverables to the senior leadership team for review.
- Strong presentation skills including an ability to explain technical issues in non-technical language
- A background in cyber security consulting, audit or risk management.
- Business development experience, including responding to opportunities and building strong relationships with internal and external stakeholders
- Tertiary qualification.
- Experience working across multiple teams, delivery groups and stakeholders.
- Experience with digital assessment platforms.

**Cyber Defence
- Red Teaming
- Penetration Testing,
- Application Security Assessments
- Web Application
- Infrastructure (Windows and Linux)
- Mobile Application
- Coaching and developing junior staff members
- Experience in preparing Statement of Works (SOWs), proposals, RFQ responses, client deliverable reports, engagement status updates and other client communications as they relate to client and market needs
- Previous experience in Preparing SOWs, proposals, RFP responses, client deliverable reports, engagement status updates and other client communications
- Strong understanding of fundamental computing concepts
- Strong experience in report writing
- Strong experience in communication to both business and technical stakeholders
- Offensive Security Certified Professional (OSCP) or equivalent (Must have one of these)
- Demonstrated client service excellence
- A background in Cyber Security consulting
- A tertiary qualification (preferably technology)
- Industry penetration testing qualifications
- Strong written and verbal communication skills and presentation skills including an ability to articulate deeply complex technical issues to a senior/executive/board level audience.
- You bring in consulting skills and gain experience in multiple range of emerging technology services such as IoT, Blockchain.
- Understanding and management of risk in technology through designing and implementing effective controls over technology assets.
- Experience in enhancing clients' business resilience
- security assessment or security architecture experience

**Preferred certifications
- (Lead) CREST Certified Simulated Attack Manager (CCSAM) or equivalent
- (Lead) CREST Certified Infrastructure Tester (CCT-Inf) or equivalent
- (Specialist) CREST certified simulated attack specialist (CCSAS) or equivalent
- (Specialist) Offensive Security Certified Expert (OSCE) or equivalent
- CREST Practitioner Security Analyst (CPSA) and CREST R