Arc Infrastructure manages and develops transport infrastructure assets that support growth and create jobs in WA. Rail is at the heart of our business, and the 5,500km rail network is the backbone of freight transport in Western Australia from the diverse Midwest across to the fascinating Goldfields and Yilgarn regions through to the stunning South West and Great Southern. We’re committed to working with industry, our customers, partners and communities to find new opportunities that will support and strengthen our rail network for the benefit of WA. Job Description The Opportunity We are currently looking for a Cyber Security Administrator to join our team and take a lead role in safeguarding our infrastructure against evolving cyber threats. The Role The Cyber Security Administrator is responsible for managing, monitoring, and maintaining critical security infrastructure across both IT and OT assets. This role is focused on configuring security tools, responding to incidents, enforcing policies, and ensuring compliance with industry standards such as NIST, ASD, and others. Your work will directly contribute to mitigating security risks and upholding the integrity and availability of systems and data across the organisation. You will play an integral part in delivering key business objectives, collaborating with your manager and peers, and working closely with other Technology Leads to drive continuous improvements in security. Key responsibilities: 1. Service Management & Optimisation Lead and provide cyber expertise in security projects to ensure timely delivery and operation of security services. Manage cyber incidents, coordinating remediations in line with service levels and operational targets. Oversee the fulfillment of service requests in cybersecurity, ensuring efficient responses to user needs. 2. Security Administration & Operations Administer and manage security tools such as SIEM, Email Filtering, MFA, endpoint security, and others. Monitor alerts, logs, and events, identifying potential threats and responding promptly. Maintain security configurations and implement system hardening best practices for IT and OT assets. Oversee patch management and coordinate timely security updates. Manage vulnerabilities discovered through audits or vendors, ensuring prompt patching and resolution. 3. Incident, Problem & Change Management Analyse security breaches, conduct thorough investigations, and present actionable findings. Manage and coordinate security incidents, ensuring rapid response, mitigation, and follow-up to prevent future occurrences. Coordinate changes to security policies, configurations, and procedures, ensuring minimal disruption. 4. Threat Detection & Incident Response Investigate and respond to security incidents such as malware infections, phishing attempts, and unauthorized access. Collaborate with external SOC teams and internal tech teams to analyse and resolve security threats. Support forensic investigations and threat intelligence gathering on cyber events. Update and maintain incident response plans (IRP) and security playbooks regularly. 5. Cyber Supply Chain Risk & Vendor Management Manage third-party vendors providing security services to ensure they meet agreed-upon security standards. Assist with outsourced security operations to ensure they meet SLAs and KPIs. 6. Security & Compliance Define, implement, and mature a NIST-based cybersecurity strategy for IT and OT environments. Monitor security events in real-time, detect potential threats, and ensure an appropriate response. Ensure compliance with regulatory requirements and ensure ongoing security of systems and data. Provide detailed reports on cybersecurity compliance, maturity, and remediation activities to stakeholders and management. 7. Network & Cloud Security Monitor and secure on-premises and cloud environments, including Azure. Implement and manage network segmentation, VPN security, and zero-trust architectures. Develop and refine Azure cloud security policies and standards. 8. Disaster Recovery & Business Continuity Ensure active participation in Business Continuity and Disaster Recovery (BCP/DR) planning and testing. Integrate security risks into disaster recovery strategies and support recovery efforts during security incidents. 9. Continuous Improvement Drive the implementation and continual improvement of cybersecurity processes and procedures. Maintain and update security knowledge, best practices, and compliance standards across teams. Ensure that security processes evolve in alignment with regulatory changes and industry best practices. About You To excel in this role you will have; At least 5 years of experience as a systems or network administrator, with a focus on security. A minimum of 2-3 years in a cybersecurity or information security role . Strong understanding of security frameworks such as ISO27001 , NIST , ASD , and other relevant standards. Tertiary qualifications in Information Technology, Cyber Security, or related fields, alongside relevant IT/Cyber certifications. Strong analytical and problem-solving skills, particularly in incident response and vulnerability management. Familiarity with cloud environments (preferably Azure ) and network security practices (e.g., VPN, Zero Trust). Working at Arc Infrastructure Working with us means working in a team environment where each person and team is valued for the diverse skills, ideas and experiences they bring. We promote a work environment that is characterised by personal accountability, mutual trust and respect and a genuine interest in employees. We understand our employees are the key to our success and as a team, our focus is to ensure they feel safe, valued and fulfilled in the work that they do. We provide a range of employee benefits including: flexible working arrangements professional development opportunities competitive remuneration based on skills and experience purchased additional annual leave health and wellbeing initiatives including $299 annual subsidy flu shots skin cancer checks paid parental leave staff discounts and rewards program novated leasing To learn more about Arc Infrastructure visit www.arcinfra.com / Careers How to apply If you are passionate about cybersecurity and ready to take on an impactful role, we would love to hear from you! C lick the ‘Apply Now’ button to complete the online application. General queries can be directed to [email protected] . Please note we are unable to accept emailed applications. Arc Infrastructure is committed to achieving a diverse and engaged workforce. We are an equal opportunity employer and encourage applications from female and Aboriginal and Torres Strait Island candidates. Applications close on 18 June 2025 Recruitment agencies, our internal HR team looks after all of our vacancies. If we need your assistance we will reach out to you.