Infrastructure and Cloud Security Specialist

**About Us**:
CSR Limited is a leading Australian Manufacturing business with a rich history and an exciting future. We are recognised for our innovative approach to developing sustainable and high performing building products and systems for the residential and commercial segments across Australia and New Zealand.
Our purpose is ‘Building solutions for a better future'. We have a forward momentum and we're on our way to bigger, better and aspirational outcomes for our employees, customers and communities in which we operate.
Part of the CSR family, our Transformation, Technology and Digital Business Unit has been established to embrace the changing customer and market expectations in a new digital economy. We are currently embarking upon one of the biggest business transformations in the organisation's history, with a readiness for automation and digitisation strategy for our current and future business objectives.

**About the role**:
Reporting to the Manager, Infrastructure Delivery, the Infrastructure & Cloud Security Specialist is a full time role, primarily based in CSR's coporate head offices in North Ryde. The role is responsible for on Cloud and on-premises security initiatives while continuously strengthening CSR's security capability. CSR offers hybrid working, with three days on site and two days working from home.

**What you'll be doing**:

- Delivering multiple infrastructure projects across CSR's technology suite, specialising in security in the cloud and on-premises
- Aligning with security frameworks, including Essential Eight and ISO 27001
- Defining & enforcing security principles & mitigation strategies, such as least privilege, separation of duties, defence in depth, attack surface minimisation, best practices, hardening, zero trust, CIS benchmarks
- Be accountable for on-time and to budget delivery of assigned security related projects on the Infrastructure Roadmap
- Partnering with the Information Security and Risk team to scope & deliver projects they raise based on industry recommendations, security assessments, vulnerability identification, & penetration testing
- Educating broader Infrastructure team members on emerging security risks & improvements to existing practices/configuration & be a security ambassador to promote security best practices throughout the Infrastructure & Operations teams
- Identifying opportunities to automate day to day operations using various tools such as PowerShell
- Producing technical & project documentation including low level designs, implementation plans, project plans, technical as built documents, procedural documents & contribute to existing documentation as required
- Initiating & executing changes under CSR change control procedures & present major change requests to CAB meetings
- Designing solutions related to security technologies in consultation with the Infrastructure Architect & Cloud Platform Owner, & presenting to the Architecture Review Board for sign off
- Participating in an on-call/after hours roster & be accountable for the resolution or escalation of incidents.

**What you'll bring**:

- Degree-qualified in IT/Technology/Business or other relevant area
- 5+ years in infrastructure or security roles
- 3+ years experience working with Azure services including Azure Network, Compute, Identity, Security, Application/micro-services, Database & Analytics services
- 3+ years experience working with Microsoft 365 and modern workplace apps - Exchange Online (Hybrid), OneDrive/SharePoint, Teams, Identity, Security & Compliance
- Exposure to the ACSC & CIS bodies, ISO 27001 standards, vulnerability identification (SOC), and penetration testing outputs
- Solid understanding of general datacentre infrastructure virtualisation (VMware, iSCSI shared storage)
- Experience across broad set of Microsoft infrastructure technologies (Windows Server, AD, SCCM, Group Policy)
- Solid understanding of network concepts (LAN/WAN, DHCP, DNS, switching, routing, firewall security)
- Strong PowerShell scripting experience
- Microsoft Azure (AZ-500) Certification (Desirable)
- Microsoft Office 365 (MS-500) Certification (Desirable)
- Microsoft Security (SC-) Certifications (Desirable)
- CISSP/SSCP/CASP+ Certification (Desirable)
- Good time management and prioritisation skills. Able to manage multiple competing priorities
- Strong written and verbal communication skills
- Excellent problem-solving skills.

**What we can offer in return**:

- Supportive and collaborative team environment
- Solid stability with a strong focus on professional development
- A well-established major Australian company with continuous growth
- Fantastic team dynamic and work culture with a lot of support
- Rewarding career development, with opportunities within and across our brands
- Hybrid working environment
- Competitive salary package + 12% superannuation + bonus

**Culture**:
At CSR, we are committed to creating a supportive and engaging environment that recognises and