Critical Infrastructure Security Officer

About the Company

Davidson is proudly partnering with Iberdrola for the VNI West Project, a landmark energy infrastructure development recently awarded and now entering delivery phase. Iberdrola is a global leader in renewable energy generation and transmission, with an extensive track record across major Australian and international projects.

With a national network of offices and developments, this project offers an opportunity to contribute to a transformative initiative supporting Australia’s clean energy future.



About the Role

We are seeking an experienced Critical Infrastructure Security professional to join Iberdrola and the VNI West Project team.

Based in the Melbourne CBD, reporting to the Readiness Lead, this role will be the primary point of contact for the critical infrastructure security conformity of the Iberdrola Australia business by undertaking a range of reviews, analysis, audits, reporting and governance against global and local obligations.


Some specific responsibilities include:

· Day-to-day critical infrastructure security governance

· Developing and driving effective ICT security compliance programs involving activities such as to review and develop security policies, processes/procedures, and guidelines, establish compliance with policies, standards, conduct security risk assessment, assist in security advisory, audits and reviews.

· Collaborate with the Chief Risk Officer and business stakeholders for risk management, mitigation and remediation measures

· Gathering external threat information

· Lead security initiatives, this includes performing security risk assessments and implementing security policies that prevent data loss and fraud.

· Part of the Australian critical infrastructure security team and key contact for all significant information security events or incidents, leading security response activities in consultation with incident response handlers, crisis management, disaster recovery and dealing with external security agencies.

· Analysis of incident root causes and rectification activities to minimise probability of recurrence and contribute to service improvement.

· Analysing metrics and reports on performance of incident management processes.



About You

To be considered for this career opportunity, it is expected you would possess:

· Tertiary qualification in cyber security, risk management, or a commercial business field is desirable.

· Relevant certifications are advantageous (CCSP/CISSP/CISM certifications).

· (Baseline) Federal Security Clearance

· Experience in the use and population of Governance, Risk Management and Compliance (GRC) platforms especially RSA Archer.

· Experience in the use of SIEMS (Security information & event management), IDS (Intrusions Detection System) & MDR (Managed Detection & Response) platforms is advantageous.

· Knowledge in at least one of the following security frameworks:

- Australian Energy Sector Cyber Security Framework (AESCSF)

- National Institute of Standards & Technology Cyber Security Framework (NIST)

- IEC 62443 (Security for industrial automation and control systems)

- ISO/IEC 27001 (Information Security)

· Excellent communication skills coupled with a customer focus and a level of attention to detail.

· Strong technical and cyber security architecture experience.

· Experience working within AWS / Azure environments.

· Strong written, verbal, and presentation skills

· Experience within the Energy Sector is advantageous.



Benefits

This is a genuine career defining career opportunity to join an employer of choice and contribute to Australia’s clean energy future.


Please apply with current resume in Microsoft Word format only (.doc or .docx). If you would like to have a confidential discussion, please contact Donna Ison on +61 0417718763, quoting reference JN -012026-42196. Want to know more about Davidson? Visit us at www.davidsonwp.com