Cyber Security Assurance

About the position

• Oversee and coordinate Security and Privacy by Design Assurance (SPDA) activities, ensuring that appropriate security and privacy controls are incorporated into project delivery.
• 
  Drive the adoption of security-by-design principles across technology initiatives, identifying and addressing potential security and privacy risks throughout the development lifecycle.
• 
  Perform internal and external penetration testing across infrastructure, web applications, APIs and network environments to identify and assess security vulnerabilities.
• 
  Evaluate new and existing systems, products and services against organisational security policies, recognised industry standards and established security practices.
• 
  Perform controlled vulnerability exploitation to establish the potential impact of unauthorised access, information exposure and data compromise.
• 
  Execute automated and manual security assessments to evaluate system resilience against different attack vectors.
• 
  Contribute to the architecture and design of cybersecurity solutions, ensuring alignment with industry best practices, performance requirements and scalability considerations.
• 
  Partner with infrastructure, development and IT teams to ensure secure implementation and integration of technology solutions.
• 
  Apply threat modelling and security risk assessment methodologies during the design and development of systems and applications.
• 
  Conduct security reviews of technology projects and identify Material, Procedural and Administrative (MPA) risks, ensuring that appropriate remediation measures are implemented.
• 
  Validate that technology initiatives meet the required security baselines before progressing through implementation and delivery.
• 
  Monitor emerging cybersecurity threats, vulnerabilities, attack methodologies and defensive techniques to maintain an effective security posture.
• 
  Investigate and evaluate emerging cybersecurity technologies and methodologies that could enhance the organisation's security capabilities.
• 
  Support knowledge transfer, technical coaching and mentoring within the cybersecurity function to encourage continuous improvement and capability development.

Desired Skills:

• Cyber
• Security
• Assurance