Security Operations Specialist

The Security Operations Specialist is responsible for supporting and governing the security operations and identity and access management services within QTC’s outsourced I.T. support operating environment.

Responsibilities & Accountabilities

To provide expert level contribution in the following capabilities:

- Enable and support QTC in developing a mature Information security environment. This includes:

- Working closely with QTC’s support partners to remediate security vulnerabilities identified through activities such as vulnerability scans, penetration tests and audit findings.
- Continually improving QTC’s security posture through industry best practice strategies, such as alignment with the ACSC Essential 8 security mitigation strategies and SWIFT Security Controls Framework.
- Contribute to governance of and provide recommendations to achieve and maintain an appropriately secure configuration of QTC's MS Azure/365 and private cloud environment.
- Assisting in the delivery of cybersecurity initiatives.
- Maintain and support the delivery of QTC’s Cybersecurity Awareness Program, including the delivery of training and development of related training materials.
- Ensure the appropriate management of all areas of I.T. security service delivery.
- Supporting change management processes to ensure I.T. security changes are implemented appropriately.
- Technical security lead for the delivery of new initiatives.
- Identity and Access Management (IAM) including: The management and evolution of the identity access lifecycle for QTC staff to ensure a positive experience regarding provisioning, modifying and deprovisioning access.
- Support QTC’s business continuity practices, including cyber incident investigations and response activities.
- Create and maintain process and procedural documentation.

Competencies

Technical Competencies
- Strong understanding of all aspects of information security and identity management.
- Strong technical security knowledge of Microsoft Azure and M365 (other public cloud technical experience / certifications would also be considered favourably).
- Strong ability to investigate and troubleshoot security related issues, leveraging tools such as Azure Sentinel, Powershell, KQL, Defender and other security related tools.
- Strong track record in working towards business focused outcomes.
- Ability to manage vendors and keep them accountable to achieve defined outcomes and deliverables.
- Desirable - Identity and Access Management knowledge (Okta, Sailpoint, HR automated provisioning knowledge would also be considered favourably).
- Desirable - Industry recognised security certification (eg. Microsoft certifications - SC-900, AZ-500 or SC-100, CEH, CISSP, etc).

Behavioural Competencies
- Provide high quality work, with an ability to take ownership and responsibility for own actions.
- Contribute to team effectiveness.
- Work effectively with external vendors to deliver the desired outcome for the organisation.
- Support and liaise as relevant with committees and forums internally and externally.
- Demonstrate contribution to: Flow of work and information.
- Collaboration, innovation, and superior results.
- Stakeholder engagement.
- Alignment with change programs.
- Alignment with QTC’s 3C’s culture (Candour, Connection and Clarity).
- Continuous improvement.
- Governance and risk management.
- Deliver optimal results through collaborative relationships with internal and external stakeholders.
- Demonstrated capability across a broad spectrum of skills needed for business success.
- Negotiation, facilitation, communication skills (verbal, written, presentations) suitable to stakeholders.
- Ensure a positive Information Security culture is always adhered to.
- Personal drive and integrity and accept accountability.
- Appropriate discretion with confidential information.
- Strong attention to detail.
- Adaptable approach, with the ability to identify and balance the most critical work.
- Strong interpersonal skills, including the ability to deal with stakeholders at all levels.
- Personal leadership consistent with QTC values and highest level QTC competencies.

Leadership & Management Competencies
- Take a lead role in self-development:

- Demonstrating ongoing learning.
- Accepting stretch assignment opportunities.
- Commitment to own and team success.

**Qualifications**:
**Essential**
- Tertiary qualification in a relevant discipline.

**Desirable**
- Microsoft Azure/M365 security certifications (eg. SC-900, AZ-500 or SC-100).

Experience

**Essential**
- Minimum of 5 years prior relevant experience required.
- Extensive relevant work experience with demonstrated results.