**The Job**:
We are currently seeking an experienced Information Security Lead/ Manager to lead the review of security governance, processes, policies, and management as part of a major systems implementation. Under the general direction of the Head of IT, the Information Security Manager will be responsible for development and delivery of a comprehensive information security mechanism to ensure IT operations comply with the requirements of Head Office and local regulatory bodies. As the lead for this critical initiative, you will be responsible for ensuring that the business practices are aligned with the latest industry standards and that they are implementing the necessary controls to ensure confidentiality, integrity and availability. You'll develop information security policies, standards and procedures, ensure that policies are compliant with Head Office's requirements and local regulatory guidelines, and ensure IT operations conform to relevant information security policies, standards and procedures. Developing and implementing ongoing risk assessments and risk control programs for IT operations, you'll monitor system activities and detect risks and develop and implement an incident reporting and response program to address security incidents and respond to alleged policy violations. You'll investigate security events to determine malfunctions, breaches and remediation steps, develop and deliver education and training programs on information security for staff and prepare status reports on security matters to develop security risk analysis scenarios and response procedures. Participating in long-term planning for strategic security services and working collaboratively with stakeholders to achieve objectives, you'll liaise with internal and external stakeholders on all issues relating to cybersecurity incident response, manage security operational matters to identify, protect, detect, respond and recover incidents and will work with the wider team to ensure proper risk management and audit compliance.
**Employer Bio**:
This company is a well-established and respected business and their Head Office in Geelong offers a world-class working environment with career progression opportunities. The business is currently undergoing a major uplift of its entire technology framework, integrating a variety of new systems.
**Benefits On Offer**:
Working shoulder to shoulder with experienced and talented leadership, you'll be enabling an exciting piece of transformation and have the opportunity to work for a successful business. Generous remuneration and a flexible work structure including flexible work hours and the ability to work from home 2-3 days a week is also on offer.
**Culture Snapshot**:
Business activity is fast paced and agile with an accompanying growth mindset. Here you'll find high performers and bright minds. Everyone is respectful and well intentioned, and there is a genuine focus on internal promotion and continuous learning where self improvement and development is both encouraged and celebrated.
**Skills Required**:
With skills and knowledge in information security, cybersecurity incident response or equivalent, you'll have a good understanding and experience of information security best practice standards and guidelines (e.g. CISA, CISM, CISSP, ISO27000 series standards) and experience of information security incident analysis, triage and response techniques. You'll have sound knowledge of and experience with technologies used to respond to threats essential - e.g. SIEM/ log management tools, endpoint and network security management tools, demonstrated experience in endpoint analysis, knowledge and experience in performing malware analyses and excellent communication and documentation skills.
**How To Be Considered**:
**Who Are We**:
**Salary**:
circa $150,000 + superannuation
**Location**:
Geelong VIC
**Work type**:
Full time
**Classification**:
Information Technology