Cyber Security Operations Lead

About the role

NRW is looking for a Cyber Security Operations Lead to administer, secure and operate its Defence Industry Security Program (DISP) environments. Based at the Perth CBD head office, the role keeps technology environments secure, compliant and well governed, aligned with DISP requirements and the Australian Signals Directorate (ASD) Essential Eight controls. It suits an experienced IT or cyber security professional who wants to own key security operations and help shape NRW's cyber security posture.

Key responsibilities

• Administer and maintain Defence-compliant environments including Microsoft 365, Entra ID, Intune, Windows 365 and Microsoft Defender
• Coordinate DISP assurance assessments, audits, evidence submissions and remediation with the Security Officer / CSO
• Manage identity and access controls: user provisioning, MFA, Conditional Access, privileged access management and security groups
• Maintain Essential Eight controls: application control, patch management, vulnerability remediation and application hardening
• Monitor compliance, manage vulnerabilities and coordinate remediation within agreed timeframes
• Administer backup and recovery services, including regular recovery validation testing
• Maintain secure SharePoint sites, project workspaces, procedures and technical documentation
• Support Defence project personnel and contribute to incident response and security engineering
• Identify and implement continual improvements to security posture and operational effectiveness

Required profile

• Tertiary qualification in IT, information security, computer science or a related discipline
• Extensive experience in IT, technology or cyber security teams
• Previous experience administering Microsoft 365 environments, including Intune and Entra ID
• Experience supporting security audits, compliance reviews and maintaining technical documentation
• Australian work rights
• Experience with Defence, Government or DISP-accredited environments, and industry certifications such as CISSP, CISM or Microsoft, Palo Alto and Cisco certifications, are highly regarded

Required skills

• Hands-on Microsoft 365, Entra ID, Intune and Windows 365 in complex enterprise environments
• Identity and access management, endpoint security, application control, vulnerability management and patch compliance
• Understanding of the ASD Essential Eight and DISP requirements
• Strong troubleshooting, analytical and communication skills, able to explain technical risks to non-technical stakeholders

What we offer

• Competitive remuneration package and salary sacrifice and novated lease options
• Loyalty bonus scheme and $3,000 employee referral bonus
• Professional development and certification opportunities
• Discounted private health insurance, paid parental leave, income protection insurance and EAP
• Employee discounts with over 450 retailers