Principal Information Security Specialist (Design) — Brisbane CBD, Brisbane

Job details Position status Permanent Position type Flexible full-time Occupational group IT & Telecommunications Classification AO7 Workplace Location Brisbane - North Job ad reference QLD/569277/24 Closing date 02-Jul-2024 Yearly salary Fortnightly salary Total remuneration Salary Other Job duration Contact person Sherry Sarmiento Contact details Phone: 07 3635 3024 Access the National Relay Service QPS Cyber Security is a dynamic group of security professionals responsible for providing a wide range of Information Security services to QPS and partner agencies. We are dedicated to the secure development, support and maintenance of QPS and its partners' IT services, applications and infrastructure. We provide leadership and expert advice on the selection, design and implementation of information security controls and technology strategies in accordance with agency, state and federal standards, policies, procedures and legislation. The Cyber Security Design team works closely with solution architects and project staff to design and implement the security aspects of ICT solutions for the QPS and partner agencies. This includes activities such as: Security solution design, build and implementation. Security advice and guidance. Threat risk assessments. Facilitation of penetration testing. Tier 3 problem resolution support. We are looking for skilled and experienced Cyber Security Architect and Design specialist who will perform assurance, design and security configuration engagements for variety of enterprise projects. This include review of solution architectures and the application, deployment and validation of security controls to achieve requirements leveraging enterprise security controls and secure design patterns. The core capability requirements for this role are: Plan, manage and participate in delivering the security aspects of small to large scale technical projects. This includes delivering detailed security designs and the configuration and implementing of security infrastructure and related services. Provide technical expertise in the configuration of security services and infrastructure. Conduct risk and vulnerability assessments and develop reports on findings, providing both strategic and tactical advice including recommendations on remediation and mitigation of future risks. Actively participate in prioritising team workload, mentoring analysts and providing training and guidance in best practice security architecture and control implementation. Critically assess existing IT policies, standards and procedures and develop new policies, standards and procedures as required. Continually expand knowledge of developments and trends within the network and information security industry in order to evaluate the benefit and applicability of new and emerging technologies. Role Requirements Qualification: Highly Desirable: Tertiary qualifications in Computer Science or equivalent and/or Information Security industry certifications such as GIAC (GSE, GDSA), CISSP, SABSA, TOGAF, CEH, OSCP, CCSP, CISM, Cloud Architecture Certification (AWS, Azure) and security vendor specific certifications. Technical/ Operational/ Educational experience: 5 years of demonstrated experience, with an advanced skill level, in security architecture design, build and implementation. Demonstrated experience in assessing risk and utilising security control frameworks such as the ASD ISM, NIST and ISO27000 series of security management standards. Demonstrated experience, in the effective configuration, and problem resolution of enterprise security infrastructure and services, such as: Enterprise Firewalls & IDS/IPS Application Delivery Controllers (Application Firewalls, Reverse Proxies, Load Balancers) Networking & VPN solutions. Email & Web Content Filtering Identity & Access Management Multifactor Authentication & RADIUS Cloud based services such as AWS & Azure SIEM & SOAR DNS, NTP, FTP PKI Endpoint Security Applications to remain current for 12 months. Job Ad Reference: QLD/569277/24 Closing Date: Tuesday, 2nd July 2024 Further information We are committed to building inclusive cultures in the Queensland public sector that respect and promote human rights and diversity. Please ensure you download all attachments and follow the instructions on how to apply. Documents Before applying for this vacancy please ensure you read the documents below. 569277 24 - Applicant Guide (Word, 226KB) 569277 24 - Role Description (Word, 5.38MB)

Applications close Sunday, 14 July 2024
Take me to the job