Security Analyst

**Security Analyst**

**The Role**: As a Security Analyst, you will play a crucial operational role in ensuring a secure digital environment for our customers, employees, and the entire organisation. You will be instrumental in protecting, defending, responding to, and recovering from digital incidents, contributing significantly to our overall cybersecurity resilience and operational effectiveness.

**Your New Team**: You will join our dedicated Security Operations team within the Technology division at Auto & General, Australia's fastest-growing major Motor and Home insurer. Working under the Senior Manager, you will contribute to safeguarding our digital assets and maintaining a robust security posture across the organisation, fostering a culture of high performance and integrity.

**Key Responsibilities**:

- Identify, analyse, and recommend mitigations for threats and vulnerabilities across IT systems and networks.
- Evaluate cybersecurity intelligence, prepare appropriate responses, and assign tasks to relevant support teams.
- Provide input into the ongoing development of the digital security roadmap.
- Act as a digital security ambassador, fostering effective communication and relationships across the business.
- Conduct initial risk assessments for new threats and vulnerabilities.
- Proactively respond to cyber issues, including BAU and high-severity incidents, escalating as needed.
- Investigate, document, respond to, and report on cybersecurity issues and emerging trends.
- Support the operational delivery of various security services, such as Investigation, Incident Management, and Policy.
- Investigate cybersecurity events, crimes, and digital evidence related to IT systems and networks.
- Contribute to the selection and implementation of new security technologies and solutions.
- Support adherence to APRA's prudential standards and contribute to a robust risk management framework.

**Qualifications & Experience**:

- More than 5 years of relevant operational experience, ideally within a Security or Network Operations Centre.
- Demonstrated experience in analysing and interpreting data into actionable security intelligence.
- Proven operational knowledge and experience in risk, control, vulnerability assessments, and incident management.
- Strong and effective communication skills, including verbal, report writing, and presentation abilities.
- Demonstrated ability to develop, document, implement, and continually evolve operating policies, processes, and procedures.
- Customer service-oriented and delivery-focused with a strong sense of urgency.
- Demonstrated drive and passion for Digital Security and a commitment to success.
- Current security certifications (e.g., CISSP, CISM, CEH) or equivalent recognised industry certifications (desirable).
- Experience in the Banking, Finance & Insurance and/or Technology industry (desirable).
- Bachelor's Degree in ICT/Computer Science or a compatible degree (desirable).

**Our Perks**:

- Hybrid Work: Work from home 2 days a week, with our office located in Toowong.
- Extra Leave: Paid 'ME' day, a paid volunteer day, and the option to purchase additional leave.
- Development Opportunities: Access to internal programmes and online courses.
- Employee Discounts: Discounts on Budget Direct insurance products.
- Reward and Recognition: Celebrate high performance with recognition, rewards, and incentives.
- Onsite Facilities: End-of-trip facilities and private spaces for nursing mothers.
- Get Social: Participate in vibrant social and community activities, including annual celebrations.

**Location - Toowong** Close to a variety of public transport and easy parking options, the Toowong office has excellent end of trip facilities (including secure bike storage and showers), outdoor spaces and plenty of modern collaborative areas to work and connect with colleagues.Conveniently based at Toowong Village tower with views of the mountains and the Brisbane River, our location is only 4 km from the city and provides access to retail, restaurants and other amenities.
- Note: Recruitment agencies are kindly asked to refrain from sending unsolicited resumes. _Auto & General is not responsible for any fees related to unsolicited resumes._

(IT) The detection and prevention of cyber threats to an organisation. Ferreting out the weaknesses of related infrastructure (software, hardware and networks) and finding creative ways to protect it.