Security Advisor

We're REA

An Australian start-up success story we're quietly proud of.

From a garage in Melbourne to the global stage is an achievement we're humbled by. Our idea to put pictures of houses on the internet has blossomed since 1995, and we now have businesses across Australia, India and North America.

Our purpose is to change the way the world experiences property. No matter where you're at on your property journey, we're here to help on every step - whether that's buying, selling, renting or renovating.

We're proud to have been named Australia's 4th Best Workplace for the second year running. This recognition is a great proof point of our unique and special culture. A culture that is driven by our people, our values, and our commitment to making a difference in the community.

What we're doing

With us, you'll have an impact. If you're looking for a security-by-the-numbers role, this isn't the job for you. If you are looking to work alongside some of the brightest and best in the industry - read on

The Group Security Team create tech to protect REA across corporate infrastructure and cloud environments, driving the adoption of security patterns and practices by the rest of the business to be built into their own infrastructure. We're looking to level up on the Security services we provide, and we'd love you to come help us.

The Group Security team work together to embed security throughout REA, empowering staff to make good risk decisions and equipping them with the tools to do so - a Cyber 'health service', not a police force.

Our strategy centres around 5 simple priorities: visibility of assets and threats; prioritizing good technology hygiene; broad adoption of key security controls; promotion of a risk aware culture and data protection. Our security program extends to assessing our business partners and supplier security posture.

What the role is all about:

- Promote the transfer of knowledge across REA regarding key risk security practices (e.g. REA cyber security policy, risk framework, incident management, security capabilities provided by Group Security).
- Maintain on-going relationships and work closely with the nominated Business Groups, and support the other Security Advisors across the broader REA businesses.
- Participate in internal and external security forums, working groups and Lines of Business activities to promote security concepts.
- Evaluating and making recommendations on new security products and advising on implementation into existing environments and external partners.
- Investigating, responding to, and reporting on, security incidents as directed.
- Monitoring emerging security technologies, issues and directions.
- Develop security best practices that are adapted to REA Group's environment, culture and needs.
- Assisting with development, deployment and maintenance of security policies, procedures, standards, and strategies.
- Develop and lead initiatives to grow security skills and capabilities within the broader REA community.
- Demonstrate your knowledge of information security to all staff day-to-day and via security awareness programs.
- Mentor and direct staff from other teams to follow good security practices.

Who we're looking for
- Good interpersonal and consultative skills.
- Demonstrated experience of performing security risk assessments and supporting design and development of security.
- Strong knowledge and understanding of information security practices and policies, including information security frameworks, standards, and best practices and common security technologies.
- Sound knowledge of Security technologies such as WAFs, IPS, vulnerability management tools, endpoint security solutions.
- Knowledge of security management frameworks, such as ISO 27001, NIST, PCI-DSS, and Australian Privacy Principles.
- Experience working in Agile, DevOps environment is preferable.
- Understanding and experience of Cloud technologies is highly desirable.
- Recognised security industry certifications (ISSP, CISM, CRISC, GIAC, SABSA, etc.), are highly regarded.

But we don't just look for someone based on their skills and expertise. It's our connection, acceptance and genuine care for each other that makes REA a great place to work. That means you also need to be:

- Savvy minded and have curiosity to think a little left of field / outside the box
- A strong and creative communicator
- Friendly, approachable and have good relationship management skills
- An avid contributor to our inclusive culture - we celebrate different perspectives and all play an active role in creating a sense of belonging

The REA experience

The physical, mental, emotional and financial health of our people is something we'll never stop caring about. This is a place to learn and grow. We're committed to your development - both professionally and personally. Your experience with us is something we take seriously.

We offer:

- A flexible working environment, mean