IT Officer-Security at SANDFIRE RESOURCES

This role involves working closely with the network and security team in Perth (IT Group) to implement, monitor, and document security systems and procedures.

Key Performance Areas

• Develop, implement, and maintain IT and OT cybersecurity policies, procedures, and standards. Ensure process compliance with the corporate policies and standards.
• Lead vulnerability management program and operate cutting-edge vulnerability management system.
• Conduct regular security assessments and audits to identify vulnerabilities and ensure compliance with industry standards. Identify, assess and manage cybersecurity risks.
• Lead the incident response process, including detection, containment, eradication, and recovery from cybersecurity incidents.
• Collaborate with forensic investigations to determine the cause and extent of incidents and document findings.
• Collaborate with the IT and security team in Perth to implement and document security systems and protocols.
• Work with other departments to ensure that security policies are integrated into all aspects of the organization.
• Be a key part of continuous cybersecurity improvement program working closely with IT and business stakeholder.
• Implement and manage security systems, including firewalls, intrusion detection systems, and antivirus software.
• Ensure, all security systems are up-to-date and functioning effectively.
• Monitor all systems for compliance with security policies and procedures. Provide regular reports on the status of IT security to management.
• Coordinate delivery of security awareness training campaign for employees and promote a culture of security within the organization.
• Stay up to date with the latest security trends and technologies and ensure continuous improvement of security practices.

Technical Competencies

• Strong understanding of IT and OT cybersecurity principles and best practices.
• Excellent analytical and problem-solving skills.
• Solid understanding of TCP/IP networking and OSI.
• Knowledge of NG firewalls and policy management.
• Knowledge of EDR and endpoint protections solutions.
• Knowledge of Active Directory, group policies and Windows security best practices.
• Overall understanding of OT and related security principles and best practices would be beneficial.

Behaviours/Personal Attributes

• Strong communication skills, both written and verbal.
• Ability to work independently and as part of a team.
• High attention to detail and the ability to handle sensitive information confidentially

 Qualification & Experience

• Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field.
• Following relevant certifications or similar, are highly desirable;
  • Certified Information Systems Security Professional (CISSP) or (ISC)2 Associate
  • Certified Information Security Manager (CISM),
  • Certified Ethical Hacker (CEH), Security+, GSEC,
  • CCNA/NP Security
• Minimum of 5 years of experience in IT security or a related field.
• Experience with security systems, including next-generation firewalls, intrusion detection systems, and antivirus software. Experience with Fortinet, Palo Alto or similar technologies as well as SIEM or XDR solutions would be highly beneficial.
• Proven experience in incident response and forensic investigations.