IT Security Analyst

**IT Security Analyst**:
NSW - Sydney CBD Information Technology Full Time

**WHY EML?**

At EML we share a common purpose of helping people get their lives back. We are committed to having the lowest caseloads in the industry, and therefore have a number of opportunities available in our claims teams.

We truly support each other and offer competitive benefits, flexible hours and work from home arrangements. We foster a learning culture that allows for us to continually invest in our employees ensuring a long-term career here at EML.

**_ Here are just some of the employee benefits we offer at EML:_**
- A diverse and collaborative team culture like no other
- Flexibility to work from home to support work/life balance
- A corporate wellbeing program with discounted health insurance and gym membership
- Generous discounts from over 350 retailers through our RewardsHub program
- Comprehensive learning and development opportunities to help you reach your full potential
- Access to support and counselling services with work or personal matters, through our Employee Assistance Program
- Companywide events to stay connected and celebrate success
- Entitlement to annual company incentive scheme + salary reviews
- Access LinkedIn Learning - 18,000 courses to advance your professional education
- Up to 16 weeks paid parental leave, plus super

**We stand together as equals. **EML is an equal opportunity employer so by coming to work for us, you’ll be part of a culture that celebrates diversity and inclusion. We’re committed to maintaining a workplace where everyone feels valued and where we show respect, integrity and honesty.

**THE ROLE**

As part of our diverse team based in **Sydney**, you will help make a positive impact on someone’s life every day. You will feel great satisfaction knowing your talent and hard work has a purpose.

This will be a **Full Time Permanent** position based in the **Sydney CBD** office, with flexibility to work from home.

You will be responsible for planning, implementing and managing security measures to protect EML’s data on computer systems, networks and cloud environments according to the information security policies and framework that align with the business requirements.

Your role will work closely with the information security and risk manager in ensuring operational effectiveness of controls in order to maintain our Information Security Management System and to ensure that EML is effectively delivering against required information security standards and regulatory requirements.

You will assist with improving and maintaining an effective continuous threat and vulnerability monitoring program, responding to incident detection, analysis and remediation activities. The senior IT Security Analyst will have an operational and technical security focus to deliver cybersecurity initiatives. You will provide guidance to the security requirements for technical proposals and specification documents.

You will assist the various teams in Technology and business to implement security measures and controls and guide them on ensuring the effective management of these controls to continuously improve our security posture, but also continue to maintain the required risk balance to allow our business users to operate adequately

**YOUR RESPONSIBILITIES**
- Review systems configurations and architecture against appropriate standards and frameworks to ensure optimal efficiency
- Perform technical security tests, including controls audits, gap assessments, security vulnerability testing, behavioural monitoring and anomaly detection and make recommendations for improvements from findings
- Conduct research into emerging technologies and trends, standards, and products as required
- Conduct root cause assessments in response to incidents and/or identification of non-conformities to identify correct causality and the corrective actions required
- Participate and support the Information Security Manager in driving the integration of information security requirements into required processes and agreements to ensure client data and claims information entrusted to client is secured

**ABOUT YOU**
- Fantastic communication skills, you’ll be able to translate technology to anyone in the business
- 3 -5 years experience in a similar role
- Proven experience of information security management within a large financial institution or highly-regulated industry
- A creative thinker and problem solver with the ability to think about things outside the box
- Experience working in an operational capacity i.e. not in an oversight capacity, must have hands-on experience
- Experience with implementing technical security controls on Microsoft cloud services
- Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH) or equivalent industry certification would be highly regarded

**ABOUT EML**

We value our people and are committed to supporting our employees by investing in