Security Operations Manager

Join Australia's fourth largest Telco in an exciting growth phase
- We are all about flexible working
- We high five you on your work anniversary and give you a day off

We are a business who is crazy about customers. We use disruptive thinking every day to ensure that we are capturing every opportunity to deliver the ultimate experience to our customers and people. We empower our people to Do it. Own it. Love it and that’s why they choose to work for us.

Here, it’s never just a job - We care about what we do and the impact we have, and that’s what connects us.

**The role**:
You'll be responsible for managing and coordinating the Security Operations function within Vocus and to provide oversight and help improve the security posture of Vocus systems & infrastructure. You'll analyse, review and raise security assessment concerns, helping enforce best security practice from industry defined standards.

**Responsibilities**:

- Performs security monitoring, security and data/log analysis, and forensic analysis, to detect security incidents, and mounts incident response.
- Manage the relationship and performance of Vocus’ security partners and vendors.
- Maintain and manage Vocus’ SIEM platform to ensure effective identification and management of security incidents.
- Investigate and utilise new technologies and processes to enhance security capabilities and implement improvements.
- Provide trusted security mentoring to development and systems delivery teams
- Create new ways to solve existing production security issues
- Collaborate with colleagues on authentication, authorization and encryption solutions
- Evaluate new technologies and processes that enhance security capabilities
- Collaborate on the definition, implement and maintenance of corporate security policies
- Analyse and advise on new security technologies and program conformance
- Recommend modifications in legal, technical and regulatory areas that affect IT security
- Perform vulnerability testing, risk analyses and security assessments
- Proactively conduct hands-on security assessments on systems and infrastructure equipment, identify security vulnerability/weaknesses, evaluate countermeasures, and recommend best security practices to mitigate the vulnerabilities.
- Review the results and recommend effective remediation of vulnerability scan, penetration test and compliance reports.
- Participate and recommend security controls for IT and Systems related projects.
- Be a champion of effective security best practices and promote their acceptance, adoption and socialisation
- Collaborate and work effectively with other teams
- Participate in the information security incident management process
- Develop and maintain regular information security reports for managers and teams.
- Review and test (if required) security solutions using industry standard analysis criteria
- Developing, maintaining, enforcing and promoting awareness of security policies, procedures and standards.
- Manage implementation of security and control techniques and technologies as per business requirements, and reviewing periodically for ongoing validity.
- Manage relationships with the key stakeholders to ensure that our customer expectations are met.
- Recruit new employees and managing the professional development of current Security Operations specialists.
- Create and maintaining technical documentation, reports and records regarding security solutions.
- Provide escalated (3rd level) technical support, troubleshooting and fault rectification of high level technical issues related to security operations and services.
- Participate in corporate change control procedures and methodologies.
- Collaborate and work effectively with other teams
- Other Information Security tasks as directed

**Skills and experience**:

- Strong understanding of secure systems architectures
- Knowledge of Identity and access management principles
- Complex problem-solving abilities
- Strong oral and communication skills
- Passionate about information security with a strong commitment to continuously improve user experience outcomes
- Experienced in vulnerability scanning, security monitoring, threat intelligence and security analytics tools such as Qualys, Nessus, Burpe Suite, Nipper etc.
- Infrastructure Security Hardening (Systems & Infrastructure) based on Industry Best Practices
- Systems Security Experience, Strong understanding of operations systems (Windows, Unix, Linux, etc.) and communication protocols running on various layers of the OSI (Open Systems Interconnection) stack.)
- Understanding of network fundamentals (e.g. Knowledge of Local Area Networks, TCP/IP, IPSEC and high-level communication protocols
- Strong Understanding of Windows, UNIX and Linux operating systems
- Proficient in MySQL/MSSQL database platforms
- Good understanding of security standards such as ISO27001, PCI-DSS, AusGov PSPF, Essential Eight and ISM (desirable)
- Skills in the presentation of tec