Security Analyst

Role Purpose Administers cloud security policy and procedures to ensure preventive and recovery strategies are in place, and minimise the risk of internal and external security threats. Role Objectives

• Adhere to information security policies, standards and guidelines for Managed Services customers, including across the As-A-Service offerings.
• Implementation of security improvements in customer environments within a strict change control process
• Conduct security reviews and provide recommendations to various teams and management; introduce security testing practices for new and existing systems
• Participate in security incident response processes
• Implement continuous improvement in information security practices
• Proactively work with IT projects and staff to provide advice and guidance on IT security policies and procedures.
• Under direction, conduct regular risk assessment analysis of critical IT systems, core business applications, and IT infrastructure.
• Evaluate new strategies and plans to address potential and known IT security vulnerabilities, risks and provide recommendations to management.
• Conducting risk management activities (risk assessment, gap analysis, business impact analysis, etc.) to help the enterprise reach an acceptable level of risk
• Advising and making recommendations regarding physical and technical security controls
• Reporting appropriate metrics to management
• Conducting risk and vulnerability assessments for Data#3 customers using a range of tools and techniques.
• Auditing customer systems and processes to identify security weaknesses.
• Creation of reports highlighting identified issues, potential impacts and recommended remediations.
• Participating in meetings (both onsite and remotely) with customers to discuss risk and vulnerability assessment plans, and to report findings. Must be flexible to travel. Security Analyst Line of Business - Services
• Respond to information security issues during each stage of a projects lifecycle. Skills, Experience & Qualifications
• 1-3 years’ of proven experienced in a dedicated security role within large/complex environment.
• Excellent communication and presentation skills to ensure clear and accurate communication with staff, customers and specialist vendor
• Effective negotiation and problem resolution skills to achieve win/win situation
• Be able to work and remain calm under pressure
• Must be a self-starter and work with little supervision
• Demonstrable knowledge and experience in successfully implementing IT security initiatives, including experience in undertaking security risk assessment analysis of critical IT systems and infrastructure
• Strong written and verbal communication skills, demonstrated ability to produce high quality policy, process and procedure documentation.
• Risk and compliance experience
• Excellent communication and presentation skills to ensure clear and accurate communication with staff, customers and specialist vendor
• Effective negotiation and problem resolution skills to achieve win/win situation
• Be able to work and remain calm under pressure
• Knowledge of firewall and intrusion detection/prevention protocols.
• Strong understanding of Windows, UNIX and Linux Operation Systems
• Knowledge of Identity and access management principles
• Understanding of secure network architectures
• Tertiary qualifications in information systems and/or equivalent degree/qualification with extensive relevant experience and or formal security qualification with a minimum of seven years relevant IT security experience.
• Industry security certification (CISSP, CISA, CISM, OSCP, CEH, SANS, GIAC) is desirable. Security Analyst Line of Business - Services
• Knowledge of Risk & Security Standards – e.g. ISO 27001-2, AS/NZS7799, AS/NZS4360, HB321, AS/NZS13335, AS/NZS ISO 31000:2009, COBIT, ITIL v3
• CCNA/CCIE (Security)
• Checkpoint Certified Security Associate (CCSA) R77 desirable
• Fortinet NSE 4 certification highly desirable
• Palo Alto Networks Certified Network Security Engineer (PCNSE)
• Palo Alto Networks Certified Network Security Administrator (PCNSA)