Job Description
Skills required:
- Tertiary or vocational qualifications in electrical engineering, computer science or network technology.
- CISSP, CISA, CISM or equivalent/substitute qualification
- Previous experience in defining architecture around security within in large organisations
- Operational experience in the energy, mining, manufacturing, transport and technology industries.
- Operational Technology Security (OTS) technology implementation and operational experience.
- Network cyber security defence implementation and / or operational experience (firewalls, vulnerability management, intrusion prevention, secure web gateway (SWG), email protection).
- Experience in employing Capability Maturity Model Integration (CMMI) models to assess current state maturity and progress measured against industry standards and frameworks.
- Network security testing experience
- Australian Energy Sector Cyber Security Framework (AESCSF).
- Information Security Management Standard, (ISO 27001).
- Risk Management - Guidelines, (ISO 31000).
- International Society of Automation, Security for Industrial Automation and Control Systems, (ISA 62443).
- USA National Institute of Standards and Technology (NIST), Special Publication 800-82 Guide to Industrial Control Systems (ICS) Security, (NIST 800.82).
- Australian Security of Critical Infrastructure Act 2018.
- NIST Cyber Security Framework (NIST CSF).