Mid-Level Information Security Specialist

About the role

A growing threat management team within an information security function in Brisbane CBD is looking for a mid-level Information Security Specialist. The role focuses on cyber security governance, risk, assurance and vulnerability management, working closely with business and technology stakeholders to strengthen the organisation's security posture. It is a contract role with possible extension.

Key responsibilities

• Manage vulnerabilities and remediation activities
• Coordinate security testing and assurance reviews
• Conduct third-party security assessments
• Support security governance, risk and compliance initiatives
• Track and report on security risks and remediation progress
• Partner with business and technology stakeholders to improve security controls and processes

Required profile

• 3 to 6 years' experience in information security, cyber security, GRC, security assurance or technology risk
• Strong understanding of security governance, risk and compliance principles
• Experience with vulnerability management and remediation
• Previous experience in financial organisations or highly regulated environments is an asset

Required skills

• Knowledge of security frameworks such as ISO 27001 and NIST
• Stakeholder engagement and communication skills
• Ability to manage competing priorities and deliver outcomes