Security Engineer - Assurance

About the role

George Weston Foods is looking for a Security Engineer - Assurance in Sydney. The role supports security assurance, third-party security reviews, implementation of security standards, security projects and broader security operations. It suits a security generalist with an assurance and risk mindset who can deliver practical security outcomes across multiple technology domains.

Key responsibilities

• Interpret security policies, standards and control requirements and turn them into practical assurance activities.
• Develop security metrics, dashboards and reports to show control effectiveness and risk.
• Analyse data from security and IT platforms to spot trends, risks and improvement opportunities.
• Automate security assurance, compliance validation, reporting and evidence collection.
• Own and improve the third-party security risk process, including supplier security assessments and remediation.
• Identify, document and communicate security risks, control gaps and remediation recommendations.
• Support security improvement initiatives, projects and new security capabilities, controls and technologies.
• Deliver security guidance, awareness initiatives and promote a positive security culture.

Required profile

• Tertiary qualification in a relevant technology discipline; professional security certifications such as CISSP, Security+ or MCSE Security are highly regarded.
• Enterprise infrastructure and cloud experience, with monitoring, logging and security operations knowledge.
• Experience in identity and access management, vulnerability management, security monitoring and security governance and risk management.
• Proven use of reporting, scripting, APIs, workflow automation or low-code/no-code tools for security assurance and compliance.
• Stakeholder engagement, communication and influencing skills, plus analytical and problem-solving skills.