Cyber Security Officer

This position will:

- Assist in identifying current and emerging technology issues including security trends,

vulnerabilities and threats.
- Develop security standards and recommend security enhancements for management

as needed.
- Conduct proactive research to analyze security weaknesses and recommend

appropriate action as needed.
- Maintain and administer software and systems that manage IT security and monitor

these systems for intrusion or unusual behavior.
- Conduct periodic scans of the network to find vulnerability, arrange penetration testing

and ensure remediation of vulnerabilities.
- Liaise with internal and external stakeholders to procure and implement secure

technology solutions.

**RELATIONSHIPS
**Reports to**:(Position Title)**:Program Leader Technical Services

**Report to: (Position Number)**

**Staff Responsibility**:0

**Key Internal Relationships**:Program Leader Technical Services

**Key External Relationships**:Government Agencies and Local Government
Hardware and Software Providers, Cloud Service
Providers, Consultants and Contractors

**KEY RESPONSIBILITIES**

1. Respond to security incidents, identify, report and implement appropriate security

management, monitor compliance with security policy and protocols, maintain security
risk register. Assist BIS team leaders and management with audit process and
compliance.

2. Analyze security system logs and data. Look for and remediate vulnerabilities in
Information systems.

3. Proactively alert and advise system owners of high-risk vulnerabilities and exploits.
Provide audience specific security training.
- 4. Provide specialist advice and assist in the management of:
- Intrusion Detection and prevention systems and tools
- Password management
- Firewall and security appliances
- End-user device security
- Network Security
- Logging and event collection systems
- Other on-premises, mobile, field and cloud technology infrastructure

5. Coordinate security system implementations for end user, infrastructure and business

6. Recommend and refine information security policies and standards.
7. Represent Council at user forums on information security matters.
8. Attend Council and Committee meetings as required.
9. Keep abreast of Industry and business trends and changes.
10. Undertake special information security projects and assignments as requested by the

Manager or Director.
11. Act professionally, ethically and with integrity in the performance of these duties.

**Guiding Principles
- We act as one organisation responding to the changing needs of our LGA and

community
- We are strategy led, driven by our Community Strategic Plan with clear priorities and

focus
- We are service focused ' we continuously improve service provision and provide

excellent customer service
- We collaborate and work together to achieve our outcomes
- We ensure safety and well-being is at the centre of our organisation, operations and

culture
- We are a financially sustainable organisation, living within our means, ensuring best

value resource allocation
These Guidelines complement the Council’s adopted Values of: Work Together; Work
Safe Home safe; Service Excellence; Value for Money; Trust and Respect; and,
Supporting Community

**Workplace Health & Safety**

Ensure compliance with WHS obligations and responsibilities as outlined in Councils
policies and procedures and under the relevant WHS legislation. These include but are
not limited to: identifying potentially unsafe situations or work practices and notifying your
Supervisor or Manager (or the Health, Safety Manager/Area Safety Representative);

never performing a task that you believe is dangerous or for which you do not have the
experience, or have not received appropriate instructions and training or where the correct
equipment to carry out the task safely is not available; always work in a safe manner and
in accordance with safety instructions, where applicable; use the work equipment supplied
for the job, in accordance with the manufacturer's instructions), and any personal
protective equipment, which the Council deems necessary and has provided; be safety
aware and report any actions to your line manager which will assist the Council to meet
its legal workplace health and safety obligations.

You have the right to cease or direct cessation of unsafe work. In addition you are required
at all times to comply with Councils Asbestos Management Plan and Policy.

**COMMUNICATION**

The position is fully accountable for decisions made in conjunction with specific
responsibilities.

The position also provides authoritative advice and training on information security to
Information Technology customers and works independently to meet project deadlines
and agreed support service levels whilst keeping the Manager and Program Leader
informed of critical issues.

**AUTHORITY**

The position is fully accountable for decisions made in conjunction with specific
responsibilities.

The position also p