Security Practice Lead

Company Description

Nine. Australia’s Media Company.

Underpinned by our people, our strategic focus is on content, connections and growth.

Driven by our purpose - Australia belongs here - and guided by our values - walk the talk, turn over every stone, keep it human - we are the home of Australia’s most loved content and trusted brands across News, Sport, and Entertainment.

We lead the total television market in Australia through our key brands of Channel 9, Gem, Go, Rush and Life, and of course you can consume all our content, live or on-demand, on Australia’s leading free streaming platform, 9Now. We also own Stan, the market leading local subscription streaming service.

In our total audio business we are building talk radio for the next generation across 2GB, 3AW, 4BC and 6PR.

Nine is also an active participant in Australian consumer marketplaces through our majority shareholding in Domain and our ownership of Drive.

**Job Description**:
The Security Practice Lead is responsible for defining and actioning the Nine DevSecOps strategy that will guide and empower engineering teams to be more conscious of security from idea to release to support. The role will require understanding and balancing the needs of product delivery and technical initiatives, while building a collaborative security culture.

You will work closely with other practice leads in the organization to provide a consistent and streamlined interface for the rest of the business to interact with the Practices across the department.

The Security Practice Lead works within Product Engineering, reporting to the Head of Engineering, but aligns and operates closely with the Group Director of IT Security and the group Cyber Security team

**The key accountabilities for this role are**
- Continuous development and implementation of an aligned DevSecOps strategy
- Facilitating security incident response and crisis management efforts
- Staying up-to-date on industry trends and emerging threats to inform strategy and decision-making
- Building and maintaining relationships with key stakeholders, including Engineering Managers, Security Hats, Cyber Security, and other relevant departments
- Empowering and educating Security Hats
- Develop and accountable for key vendor partner relationships

**Qualifications**:

- What we would like to see on your resume:_

**Essential skills**
- Security mindset
- Knowledge of DevSecOps controls, best practices and technologies
- Experience in maintaining high quality secure code, identifying common coding flaws and security issues
- Influencing skills with distributed Engineering teams and senior management
- Experience with implementing OWASP into an environment
- Experience with CI/CD methodologies process and tools

**Desirable skills**
- Experience in a software engineering or product development role
- Experience working in a fast-paced, agile environment
- Media and publishing experience
- Experience managing change or transformational programs
- Experience with internet controls such as DDoS and WAF
- Leading Post Incident Reviews and risk prioritization management

**Additionally, you will be expected to**:

- Own, define, and implement the Nine DevSecOps strategy
- Evolve strategy in response to growth, metrics, stakeholder needs and technology changes
- Ability to measure and report on success of strategy

Additional Information
**Life at Nine**

Nine is a people business. Being part of the team means you’ll be in a culture that promotes creativity and innovation, diversity and inclusion, is open to feedback, rewards impact and ensures everyone is heard. Importantly, you'll receive the following:

- Career development and quality training
- Up to 16 weeks paid primary carer’s parental leave
- Discounts on lifestyle, entertainment, and leisure memberships, including health insurance, dental and gym
- Discounts on products and services with corporate partners

**Our Commitment to Diversity and Inclusion**:
Disclaimer: We do not accept unsolicited agency resumes and are not responsible for any fees related to unsolicited resumes

LI-Hybrid