Cyber Security Analyst

This global utilities organisation is currently seeking an experienced Cyber Security Analyst and monitor the organisation’s cyber security measures specialising in Industrial Control Systems (ICS) operating environment for Australian generation assets and be responsible for the remediation, reporting, monitoring and compliance of ICS Cybersecurity.

Key activities

Assist site engineers and control system teams in creating, implementing and maintaining a secure OT environment by applying security initiatives and solutions
Analyse security breaches and other security related incidents to identify root causes and ensure systems changes are identified and assessed while escalating potential breaches
Perform a range of systems security related activities including proactive monitoring, reactive support, and documentation of security incidents to support the IT Team and ensure configuration management standards are applied
Monitor the approach and compliance of security administration processes and security access through assessing metrics and data to identify unauthorised activity and prevent breaches occurring
Generate reports for IT administrators and business managers to evaluate the efficacy of the security policies in place and support continuous improvement security initiatives
Work with internal and external key stakeholders to ensure compliance is maintained with cybersecurity policies
Assume responsibility for the security of critical business systems, networks, and data, and ensure that all security policies and processes are complied with.
Develop and implement security standards, processes and procedures, and guidelines for the enterprise

Skills and experience

Minimum 2-5+ years experience in a similar role
Understanding of key protocols and patterns in IT and OT-ICS environments, IT systems, SCADA, Operational and Industrial control systems
Strong knowledge of Industrial Control Systems
Expertise in end-to-end incident response processes designed specifically for OT/ICS environments
Understanding of SIEM or other security products
Experience supporting applications, infrastructure, and networks
Knowledge of regulatory compliance and information security management frameworks (e.g., AESCSF, IS027001, COBIT, NIST, Purdue Model, etc.)
Experience with the management of vendors to deliver security programs
Industry certification such as Certified Information Systems Security Professional (CISSP) and/or Certified Information Security Manager (CISM) highly regarded

Apply now to secure an interview or contact Wes Elsayed on 9236 7766 for a confidential discussion.