Information Technology Security Analyst

Job Description

The Story An exciting opportunity has become available with a community-based not-for-profit public company, based in Melbourne's CBD, and endorsed by the Australian Government, who champion an open, free, secure, and global internet for all Australians.They have been around for over 35 years and through their high standards of corporate governance and integrity they continue to play a critical role to ensure secure, accessible, and trusted infrastructure for all internet users.The Role As part of the Information Security team, the IT Security Analyst will play a critical role in protecting the organisation's IT systems, infrastructure, and data from threats and vulnerabilities through effective monitoring, analysis, and response to security incidents and risks whilst also contributing to the continuous improvement of the IT security posture.Key accountabilities therefore include: Security Monitoring and Incident Response System Security Physical Security Patch Management to protect critical IT systems and data Policy and Compliance Support The role will form part of a small team and will therefore be responsible not just for monitoring, maintenance, and protection of the very critical infrastructure, but will also be relied upon for documentation and providing insights from what is found from the data through log reviews and reports. Working closely with C-level management around enhancements and continuous improvements in this space.You'll need experience working in an environment where you have gained hands-on experience juggling multiple tasks concurrently, and be comfortable with not just being a process follower, but experienced in taking initiative, as the role will present you with many challenges and opportunities that will fall outside your normal scope of expertise and responsibilities, where you'll need to roll up your sleeves, think outside the box, and get things done!Exciting projects coming up for this role include the ISO 27001 audit and the implementation of new tools and technologies into the environment.What You Bring To The Role A minimum of 5 years Systems Administration/Engineering experience with proficiency in OS (Windows, Linux, and Unix). Knowledge of Cloud computing environments and associated IT security frameworks (Microsoft Azure and AWS). Understanding of security principles, techniques, and technologies (EDR, XDR, PKI, DLP, IDS, Zero Trust). Knowledge of IAM principles. Good knowledge in ISO 27001, ISO 22301, Essential 8, and ITIL. Must have hands-on experience participating in an ISO 27001 audit. Solid understanding of DNS operations, DNSSEC, and threats unique to the ccTLD environment. Experience with tools like DNS monitoring and filtering solutions to detect and mitigate DNS-based attacks. Familiarity with UEBA to identify anomalous behavior that might indicate insider threats or compromised accounts. Please note that Australian Citizenship is required for this role as an AusCheck Critical Infrastructure Background check will be conducted. There are no sponsorship or visa support opportunities available for this role. What's In It For You? You'll be a part of a small, diverse, adaptive, and high-performing work culture that prides itself on its values of collaborating and working together as one, delivering value and serving all Australians. You'll work in a truly flexible environment and be part of a team that values a good work-life balance. You'll work with leaders who promote autonomy and where you'll have a voice to bring new initiatives and ideas! You'll be part of an organisation that supports and promotes growth, learning, training, and career development.Next Steps If this sounds like the ideal next step in your career and an opportunity you have been waiting for, I'd love to hear from you!#J-18808-Ljbffr