Application Security Lead

**Job no**: 528590
**Work type**: Full Time
**Location**: Sydney, NSW
**Categories**: Information Technology
- Employment Type: full time continuing role as an Application Security Lead, UNSW IT
- Starting salary $143,007 plus 17% superannuation and leave loading
- Location: UNSW Kensington Campus (Hybrid Working Opportunities)

**About UNSW**:
UNSW isn’t like other places you’ve worked. Yes, we’re a large organisation with a diverse and talented community, a community doing extraordinary things. Together, we are driven to be thoughtful, practical, and purposeful in all we do. Taking this combined approach is what makes our work matter. If you want a career where you can thrive, be challenged and do meaningful work, you’re in the right place.

**Specific accountabilities for this role include**:

- Provide expert guidance and leadership on secure development practices and technologies to IT teams and stakeholders across UNSW to embed security practices.
- Support the independent audit of cyber security controls on behalf of the University, including statutory audits completed by the Audit Office of NSW.
- Continually stay up to date and aware of legal, regulatory compliance and contractual obligations that are relevant to the University’s management of cyber security risk.
- Promote awareness of the University’s internal and external environment for emerging cyber security threats.
- Develop and improve metrics that drive security best practice and outcomes.
- Align with and actively demonstrate the UNSW Values in Action: Our Behaviours and the UNSW Code of Conduct.
- Cooperate with all health and safety policies and procedures of the university and take all reasonable care to ensure that your actions or omissions do not impact on the health and safety of yourself or others.

**Skills and Experience**:

- Understanding of architecture and security concerns specific to web technologies and frameworks (e.g., secure password storage, encryption, security headers, content security policy, CSRF, OIDC, oAuth2, hash algorithms, one-time codes, password reset, rate limiting, security logging, etc), API security and identity and authorisation standards.
- AWS and Azure security knowledge and experience desirable
- Strong problem-solving and analytical skills, with the ability to translate data into valuable information for management.
- Strong cyber security GRC fundamentals and knowledge of cyber security principles and practices.
- Excellent understanding of industry-wide security standards and compliance frameworks such as ISO 27001, NIST 800-53, CSA, Essential 8, PCI DSS, COBIT 5, Mitre ATT&CK etc.
- Relevant industry certification(s) such as SANS certifications, CEH, OSCP, CompTIA Security+, and cloud platform certification

**To Apply**: If this is of interest to you, please submit your CV, Cover Letter which includes the responses to skills.

**Applications close: Tuesday 14th of Jan at 11.30pm**

**Benefits and Culture**
- Flexible hybrid working
- Additional 3 days of leave over the Christmas Period
- Access to lifelong learning and career development
- Progressive HR practices
- Discounts and entitlements
- UNSW is committed to equity diversity and inclusion. Applications from women, people of culturally and linguistically diverse backgrounds, those living with disabilities, members of the LGBTIQ+ community; and people of Aboriginal and Torres Strait Islander descent, are encouraged. UNSW provides workplace adjustments for people with disability, and access to flexible work options for eligible staff. _
- The University reserves the right not to proceed with any appointment._

Position Description

**Advertised**: 16 Dec 2024 AUS Eastern Daylight Time
**Applications close**: 14 Jan 2025 AUS Eastern Daylight Time