Cyber Security Advice and Assessment Specialist

Description

Conducts risk and security control assessments, interprets security policies, contributes to the development of standards and guidelines, reviews information system designs, provides guidance on security strategies to manage identified risks, provides specialist advice and explains systems security, strengths and weaknesses.

Description

Develop and implement cyber security standards and guidelines, develop and install cyber security software and systems, conduct risk and security control assessments, analyse and address vulnerabilities in digital infrastructure, and respond to cyber security incidents.

Tasks include

• Conducts risk and security control assessments and vulnerability testing to identify potential security risks and weaknesses in an organisation's cyber security policies
• Provides specialist advice and guidance on security strategies to manage identified risks and vulnerabilities
• Develops and implements security policies, procedures, and standards and guidelines to help organisations maintain a strong security position
• Undertakes investigations and reports on security incidents, and guides the refinement of practices and processes that increase the detection of security related incidents
• Assists in root cause analysis of security incidents and breaches to determine the extent of the damage, and recommend remedial actions
• Develops metrics to highlight the impact of cyber security risks on business processes and information assets
• Aligns and coordinates internal and external audit activities and security assessment engagements