â— Provide risk assessments, security advice and guidance to the appropriate teams and the
assigned customers.
â— Perform security evaluations of infrastructure changes in accordance to ITIL framework
â— Maintain awareness of trends in the development of Information Security, including through
participation in industry forums.
â— Developing and Implementing Organization-Wide Security Protocols including and not limited to
ISO27001/Essential 8/ASD
Responsibilities:
â— Ensuring business compliance in line with internal cyber security framework and standards
◠Maintain Ethan’s current security certifications
â— Review and update relevant policies across the business required for Ethan various certifications
â— Perform Risk Assessments, advise teams and clients of risks and negotiate treatment plans
â— Coordinating response and remediation efforts for Cyber security incidents
â— Support the continuous improvement of information security services and align maturity of
services against industry practices and business requirements
â— Maintain an understanding of information security trends and threat intelligence, ensuring threats
and controls are understood
â— Providing guidance and support to team members and business units on cyber security best
practices
â— Evaluate IT risks focused on cyber security
Requirements:
â— Tertiary Education, or other relevant qualifications.
â— 5+ years of experience working with large organizations such as IT Consulting, Professional
Services, or Government.
â— Understanding of Risk and Governance, Cyber Security Incident Management, Audit and
Compliance, Policy, Cloud technologies and Application Security.
â— Understanding of risk management principles, and the application of risk assessment processes
to information Security.
â— Demonstrated experience with applying information security principles, standards and
frameworks, (ACSC) Essential 8 & Information Security Manual
(ISM) and other applicable frameworks such as NIST