Job Ref: 13339 Print Job

IT Security Consultant (Data Management and Security)

IT Security Consultant (Data Management and Security)
Large Insurance Organization @ Melbourne CBD
06 months initial contract on a view to extend
Dynamic and challenging role

Acts as a role model for leadership and contribute to building a high-performance culture at client space
Takes a lead in ensuring the safety and security of all information systems assets.
Follows applicable compliance, regulatory and legislative policies.

Role summary:
The Information Security Consultant provides information security advice and analysis services to a broad range of internal customers and vendors undertaking change activities. Primary internal customers include projects teams and other members of the Information Security team. As a key customer facing role the successful applicant is expected to provide this service through consistent, efficient and repeatable process to ensure a positive customer experience.
The Information Security Consultant is involved in each phase of the Solutions Development Lifecycle and serves as both an expert on information security requirements and as an open-minded contributor to break through thinking and innovative solutions relating to information security.

ESSENTIAL REQUIREMENTS:

  • 3 years previous experience in security consulting, ideally with a broad application of skills from understanding detailed technical concerns through to developing policy and explaining security concepts in terms of business context
  • The ability to engage with multiple stakeholders at various levels within IT and business
  • Solid understanding of business process and risk analysis
  • Able to facilitate identification, assessment and mitigation of information security risks in relation to the development and delivery of IT infrastructure capable of meeting business needs.
  • Experience dealing with security and risk within a financial and health environment is preferred.
  • Understanding of security from a strategic, high level to a technical, granular level including experience in reviewing router configs and firewall rules
  • Strong knowledge and experience with security, control and risk frameworks and standards including ITIL, PCIDSS

Experiences Required:

  • Previous experience in security consulting, ideally with a broad application of skills from understanding detailed technical concerns through to developing policy and explaining security concepts in terms of business context.
  • Solid understanding of business process and risk analysis.
  • Experience in business continuity and DR planning, information security and controls, secure e-business and risk management.
  • Able to facilitate identification, assessment and mitigation of information security risks in relation to the development and delivery of IT infrastructure capable of meeting business needs.
  • Sound understanding of the whole IT “stack” and how security is applied across it.
  • Experience dealing with
  • Experience in working with and guiding both IT and business project teams, applying pre-defined security policies, to ensure effective delivery of information services to business units within a commercial environment.
  • Solid Change Management expertise in socialising security policies, processes and responsibilities across an organisation
  • Up to date knowledge on information architecture design and current security thinking
  • Understanding of security from a strategic, high level to a technical, granular level including experience in reviewing router configs and firewall rules
  • Previous experience with managing commercial support activities in a technical environment
  • Previous experience reviewing all IT layers, data flows and processes
  • Strong knowledge and experience with security, control and risk frameworks and standards including ITIL, PCIDSS, HIPAA, ISO27001, AS4360 and COBIT
  • Sound understanding of regulatory and compliance requirements in the finance, insurance and health industries
  • Experience conducting vulnerability assessments and penetration tests
  • Ideally, a tertiary qualification with a business focus.
  • Ideally have or is studying for CISSP, CISA, CISM or SABSA.
  • Excellent written and oral communication skills
  • Ability to work and communicate effectively in a team environment
  • Ability to prioritise effectively and act on own initiative
  • Acceptance of accountability for own work, including timeliness, priority and quality of deliverables as defined by IT management
  • Able to influence decision making at a senior management level

How to apply:
Please apply using the link below or call (Neil – 03 8506 6522) for further details. Applications closes based on the volume of applications received. Only short-listed candidates will be contacted. Please share your resume in Word format only.

Adaps is an equal opportunity employer that actively embraces diversity in its workforce through accurate community representation of gender, culture; thought and work arrangements.

Connect with Adaps:
Facebook: https://www.facebook.com/AdapsIT
LinkedIn: http://www.linkedin.com/company/adaps
Website: www.adaps.com.au