Security Specialist – Threat Management

About the Opportunity

We are seeking an experienced Security Specialist – Threat Management to join the Information Security team of a leading organisation within the financial services and superannuation sector.

This role will focus on supporting and coordinating information security assurance and threat management activities across the organisation. You will play an important role in monitoring security controls, managing vulnerabilities, coordinating security assessments and ensuring identified risks and remediation activities are effectively tracked through to completion.

Working closely with technology teams, risk and compliance stakeholders, managed service providers and external security partners, you will help strengthen the organisation's security posture and ensure information security procedures and controls are effectively implemented.

This is a great opportunity for a security professional who enjoys working across technical security controls, governance, risk management and stakeholder engagement.

Key Responsibilities

• Proactively monitor information security technical controls, identifying gaps, weaknesses and areas requiring remediation.

• Coordinate and manage regular User Access Reviews (UARs), including preparation, stakeholder communication, monitoring and reporting.

• Drive vulnerability management activities, including monitoring, reporting, prioritisation and remediation tracking.

• Coordinate vulnerability management forums and work with key stakeholders to ensure remediation actions are completed within agreed timeframes.

• Manage and coordinate security testing activities, including independent security assessments and ongoing control testing.

• Track and manage information security findings, ensuring appropriate remediation plans are established and followed through.

• Manage exceptions to information security policies and standards, ensuring appropriate consultation, documentation and approvals.

• Coordinate Third-Party Security Assessments (TPSAs), working with internal stakeholders and external service providers to ensure assessments are completed within agreed timelines.

• Support information asset security activities, including asset classification, security assessments and remediation tracking.

• Maintain security reporting, documentation and governance processes to provide visibility of security risks and control effectiveness.

• Build and maintain strong working relationships across technology, risk, compliance and business teams.

Skills & Experience

To be successful in this role, you will ideally have:

• Proven experience in an Information Security, Cyber Security, Security Assurance or Threat Management role.

• Strong experience coordinating or managing vulnerability management activities, including identifying findings, tracking remediation and reporting.

• Experience monitoring information security controls and identifying control gaps or weaknesses.

• Knowledge of User Access Reviews (UARs), identity and access management controls and security governance.

• Experience coordinating security assessments, security testing and third-party security reviews.

• Understanding of information security policies, standards, risk management and compliance requirements.

• Experience working with technology teams, risk and compliance functions and external service providers.

• Strong stakeholder engagement and relationship management skills.

• Excellent organisational skills, with the ability to manage competing priorities and deliver activities within agreed timeframes.

• Strong communication, problem-solving and reporting skills.

• Ability to work autonomously, take ownership of activities and drive outcomes through to completion.

Desirable Experience

• Experience working within the superannuation, banking or broader financial services industry.

• Knowledge of recognised security frameworks and methodologies, particularly ISO 27001, NIST 800-53 and the NIST Cybersecurity Framework.

• Relevant industry certifications such as CISSP, CISM, SANS or qualifications in information security, risk management or project management.

• Experience working in a regulated or compliance-driven corporate environment.

How to Apply

If you have experience across information security, vulnerability management, security assurance and risk remediation, and are looking for an opportunity to contribute to a broader enterprise security function, we would like to hear from you.

Please submit your updated CV outlining your relevant experience and availability.

To be considered for the role click the 'apply' button or for more information about this and other opportunities please contact Anna Reyes on + 617 3709 7456 or email areyes@paxus.com.au and quote the above job reference number.

Paxus values diversity and welcomes applications from Indigenous Australians, people from diverse cultural and linguistic backgrounds and people living with a disability. If you require an adjustment to the recruitment process, including the application form in an alternate format, please contact me on the above contact details.