Cyber Security Administrator

Posted: 04/06/2025

Closing Date: 18/06/2025

Job Type: Permanent - Full Time

Location: Perth Airport

Job Category: IT

Arc Infrastructure manages and develops transport infrastructure assets that support growth and create jobs in WA. Rail is at the heart of our business, and the 5,500km rail network is the backbone of freight transport in Western Australia from the diverse Midwest across to the fascinating Goldfields and Yilgarn regions through to the stunning South West and Great Southern. We’re committed to working with industry, our customers, partners and communities to find new opportunities that will support and strengthen our rail network for the benefit of WA.

**The Opportunity**

We are currently looking for a Cyber Security Administrator to join our team and take a lead role in safeguarding our infrastructure against evolving cyber threats.

**The Role**

The Cyber Security Administrator is responsible for managing, monitoring, and maintaining critical security infrastructure across both IT and OT assets. This role is focused on configuring security tools, responding to incidents, enforcing policies, and ensuring compliance with industry standards such as NIST, ASD, and others. Your work will directly contribute to mitigating security risks and upholding the integrity and availability of systems and data across the organisation. You will play an integral part in delivering key business objectives, collaborating with your manager and peers, and working closely with other Technology Leads to drive continuous improvements in security.

Key responsibilities:
**1. Service Management & Optimisation**
- Lead and provide cyber expertise in security projects to ensure timely delivery and operation of security services.
- Manage cyber incidents, coordinating remediations in line with service levels and operational targets.
- Oversee the fulfillment of service requests in cybersecurity, ensuring efficient responses to user needs.

**2. Security Administration & Operations**
- Monitor alerts, logs, and events, identifying potential threats and responding promptly.
- Maintain security configurations and implement system hardening best practices for IT and OT assets.
- Oversee patch management and coordinate timely security updates.
- Manage vulnerabilities discovered through audits or vendors, ensuring prompt patching and resolution.

**3. Incident, Problem & Change Management**
- Analyse security breaches, conduct thorough investigations, and present actionable findings.
- Manage and coordinate security incidents, ensuring rapid response, mitigation, and follow-up to prevent future occurrences.
- Coordinate changes to security policies, configurations, and procedures, ensuring mínimal disruption.

**4. Threat Detection & Incident Response**
- Investigate and respond to security incidents such as malware infections, phishing attempts, and unauthorized access.
- Collaborate with external SOC teams and internal tech teams to analyse and resolve security threats.
- Support forensic investigations and threat intelligence gathering on cyber events.
- Update and maintain incident response plans (IRP) and security playbooks regularly.

**5. Cyber Supply Chain Risk & Vendor Management**
- Manage third-party vendors providing security services to ensure they meet agreed-upon security standards.
- Assist with outsourced security operations to ensure they meet SLAs and KPIs.

**6. Security & Compliance**
- Define, implement, and mature a **NIST-based** cybersecurity strategy for IT and OT environments.
- Monitor security events in real-time, detect potential threats, and ensure an appropriate response.
- Ensure compliance with regulatory requirements and ensure ongoing security of systems and data.
- Provide detailed reports on cybersecurity compliance, maturity, and remediation activities to stakeholders and management.

**7. Network & Cloud Security**
- Monitor and secure on-premises and cloud environments, including Azure.
- Implement and manage network segmentation, VPN security, and zero-trust architectures.
- Develop and refine Azure cloud security policies and standards.

**8. Disaster Recovery & Business Continuity**
- Ensure active participation in Business Continuity and Disaster Recovery (BCP/DR) planning and testing.
- Integrate security risks into disaster recovery strategies and support recovery efforts during security incidents.

**9. Continuous Improvement**
- Drive the implementation and continual improvement of cybersecurity processes and procedures.
- Maintain and update security knowledge, best practices, and compliance standards across teams.
- Ensure that security processes evolve in alignment with regulatory changes and industry best practices.

**About You**

To excel in this role you will have;
- At least **5 years of experience** as a systems or network administrator, with a focus on security.
- A minimum of **2-3 years in a cybersecurity or information security role**.
- Strong understandin