IT Information Security Analyst, Operations

Location: Melbourne | CBD

Job type: Full time - Flexible

Organisation: Development Victoria

**Salary**: Salary not specified

Occupation: IT and Telecommunications

Reference: 778

**About Us**

At Development Victoria, we’re passionate about making Victoria a great place to be. We create vibrant places across our state, through diverse and strategic property development and urban renewal projects.

As the Victorian Government’s development arm, we revitalise iconic public buildings, create important community, creative and sporting facilities and repurpose public land, for all Victorians. We also build great homes and communities where people and businesses can thrive, catering for different budgets, lifestyles, and people - designed to be sustainable and affordable.

**The Role**

The IT Security Analyst plays a crucial role in enhancing Development Victoria's information and cybersecurity posture, focusing on protection, resilience, and maturity. You will ensure assets are securely protected, maintaining their confidentiality, integrity, availability, and recoverability.

In this role, you will keep information owners and stakeholders informed about emerging cybersecurity threats and how Development Victoria’s environment measures up to these potential threats. Reporting to the Infrastructure & Security Manager, your primary responsibility is safeguarding Development Victoria’s technology and information assets from unauthorised access and implementing effective loss prevention strategies.

You will secure a hybrid environment of cloud-hosted and on-premises platforms, proactively mitigating risks and responding promptly to any security incidents.

Reporting to the Infrastructure and Security Manager, you will be responsible for:

- Collaborate with security partners and the SOC to ensure effective incident detection and response.
- Collaborate and build relationships with key internal stakeholders for continued security education and awareness by developing and delivering security awareness programs, creating training materials, conducting information sessions, monitoring effectiveness and promoting a security-conscious culture throughout the organisation.
- Continuously monitor, be aware of, and report to the IT Infrastructure & Security Manager critical vulnerabilities that present current, imminent, or urgent threats to the environment in a timely fashion along with options for remediation as they arise.
- Lead and manage security projects, define objectives, coordinate cross-functional teams, track progress, and ensure the timely delivery of projects and initiatives.
- Understanding, advising and ensuring compliance of Industry and Government security standards and frameworks, such as the ASD Top 37, ISM, NIST, ISO 27001, SOC2, and The Victorian Protective Data Security Standards (VPDSS).
- Contribute to the design, implementation, and management of cloud security controls, not withstanding identity management, encryption, and monitoring, to safeguard cloud environments and ensure compliance with security best practices.

**Desired Skills and Experience**:
**About You**

We are seeking a confident, big-picture thinker who is commercially savvy and possesses strong security and incident management skills.
- 3 - 5 years of experience in an IT Security role.
- Demonstrated experience in the following information security areas: Incident Response, Cyber Security Awareness and Education, IAM, DLP, EDR/NDR, Encryption and Key Management, Threat Modelling and Penetration Testing.
- You will have in-depth knowledge in EDR, Content Filtering/Private Access Network, Firewalls, Event Management (SIEM), Zero Trust and RBAC.
- Proficient in AWS and/or Azure security configurations, ensuring secure deployments and assets protection.

**Employee Benefits**
- We drive strong collaboration and support our teams to work virtually and flexibly.
- Professional development opportunities available including;
- Study support
- Mentoring programs
- Opportunity to participate in cross functional working groups that drive diversity and inclusion and sustainability initiatives.
- Novated leasing
- Purchase leave
- Paid parental leave
- Technology salary sacrifice
- Employee referral bonuses
- Health & Wellbeing initiatives such as EAP and mental health and wellbeing leave
- Access to group life & group salary continuance insurance
- Modern onsite facilities

**Application Process