Security Analyst

About this role

Brief Description

The Role

As our new Junior Security Analyst, you will be assisting in the provision of an effective & efficient, sustainable, and secure digital environment for customers, employees, and the organisation as a whole. The role performs an operational function in Auto & General’s capabilities in protecting, defending, and responding to and recovering from digital incidents.

Key Accountabilities Include

Leadership

• Be an ambassador for digital security working across the business to provide effective communication on digital security matters and build relationships with other teams to ensure effective dialogue between departments.
• Continually support and strengthen the Auto & General brand and culture by personally modelling high standards of performance, positively influencing teams and individuals, negotiating, and resolving conflict, and articulating and cascading the Company vision and objectives

Job Specific

• Provide support in identifying, analyzing and making recommendations to mitigate vulnerabilities to Auto & General information technology (IT) systems and/or networks.
• Provide support in performing reviews and evaluation of incoming cybersecurity information to determine their appropriateness and prepare responses and/or assign them to relevant support teams.
• Provide support to the communication of relevant security procedures and/or processes as relevant.
• Configuring and maintaining security tools and analysis and report on network activity.
• Work with multiple teams across business and technology to identify security requirements and make recommendations.
• Monitor for and perform initial risk assessment on new vulnerabilities affecting our systems.
• Proactively respond to any potential cyber issues following predefined actions to handle BAU and High severity issues including escalating to other support groups.
• Investigate, document, respond and report on cyber security issues and emerging trends.
• Support the implementation and operational delivery of an aspect of a Security service, for example, Investigation Team, Incident Management Team, Policy and procedures.
• Investigate cybersecurity events or crimes related to information technology (IT) systems, networks, and digital evidence.
• Contribute to the selection and implementation of new technology and solutions, including in the assistance of the development of business cases.

Risk and Compliance

Role

This role contributes to A&G’S commitment to adhering to the regulatory framework overseen by APRA. You will be involved in:

• Learning and understanding APRA's prudential standards and guidelines, supporting their implementation within the organisation.
• Assisting with the identification and assessment of operational, financial, and reputational risks associated with the organisation's activities.
• Contributing to the development and maintenance of a robust risk management framework, including policies, procedures, and controls.
• Supporting the monitoring and reporting on key risk indicators and compliance metrics.
• Collaborating with internal stakeholders to promote a strong risk and compliance culture.
• Learning to identify and respond to emerging risks and regulatory changes.
• Assisting with the organisation's response to APRA audits and examinations.
• Always operating within the standards of the A&G Code of Conduct.
• This role provides an excellent opportunity to gain valuable experience in risk and compliance within a regulated environment. You will be working alongside experienced professionals and developing your understanding of the importance of sound risk management practices

Other

• Maintain awareness, understanding and compliance with Company policies and procedures, including the completion of mandatory training.
• Perform other reasonable and relevant activities as requested from time to time to meet operational requirements.

Essential

Knowledge and Experience

• Up to 3 years of experience working in cyber security.
• Basic understanding of cyber security concepts, terminologies, networking knowledge.
• Monitor and respond to cyber security tickets and alerts, providing remediation guidance and regular reports to the Head of Cyber Security Operations.
• Ability to analyze and interpret data into usable and actionable information/intelligence.
• Operational knowledge of risk, control, vulnerability assessments and incident management.
• Perform vulnerability assessments, analyse and prioritise vulnerabilities, develop remediation plans, and update the vulnerability management program.
• Support internal information security compliance activities including audits, evidence gathering, and assessment periods.
• Support fellow team members in implementing and managing advanced threat protection solutions, respond to security alerts and incidents, conduct threat intelligence analysis, and maintain incident response plans.
• Strong and effective Communication, including verbal, report writing & presentations skills.
• Ability to develop, document, implement and continually evolve operating policies, processes, and procedures.
• Demonstrated drive and passion for Digital Security and a will to succeed.

Desirable

• Experience in the Banking, Finance & Insurance and/or Technology industry servicing these sectors.
• Experience / familiarity with security tools such as SIEM|XDR, DLP, SSE, CASB, EDR and Vulnerability Management.
• Familiarity with Frameworks, such as ISO 27001, NIST, MITRE, OWASP, Essential 8 & DevSecOps practices and tools.
• Foundational understanding of programming and scripting languages, including python, PowerShell for automation.
• Bachelor’s degree in ICT/Computer Science or compatible Degree or equivalent experience.
• Understanding / experience with cloud platforms such as AWS, Azure, or Google Cloud.
• Introductory security certifications eg MTA Security Fundamentals, SSCP or studying towards advanced certifications e.g. CEH, CISSP

Our Benefits

• Salary Range: Up to $105,000.00 inclusive of super.
• Location: Toowong: Close to a variety of public transport and easy parking options, the Toowong office has excellent end of trip facilities (including secure bike storage and showers), outdoor spaces and plenty of modern collaborative areas to work and connect with colleagues.
• Extra leave - Enjoy additional leave days on us! You’ll receive a paid ‘ME’ day and one paid volunteer leave day annually. Team members can also purchase up to two additional weeks of leave per year.
• Paid parental leave - We support our new parents with paid parental leave and other benefits.
• Workplace giving - If you’re passionate about a cause, then we are too – we offer workplace giving and we’ll dollar match your donations to registered charities.
• Development opportunities - We’re championing your development with internal programs and access to a wide range of online courses.
• Employee discount - You’ll receive discounts on Budget Direct insurance products.
• Reward and recognition - We reward high performance with employee recognition, reward and incentive schemes.
• Onsite facilities - There’s excellent end-of-trip facilities on offer and private spaces for nursing mothers.
• Get social - Join our vibrant social and community activities including annual celebrations, family fun days and regular events across each of our sites.
• Perks App - Access to an employee benefits and discounts app called ‘Perks’ offering your great discounts, offers and programs across a range of areas

About Us

Auto & General (A&G) is the fastest-growing major Motor and Home insurer in Australia, providing insurance products and solutions to safeguard a brighter future for our customers and community.

Our range of general insurance products including Car, Motorcycle, Home, Contents Pet and Travel products are delivered through our multi-award-winning brand Budget Direct and partnerships with leading brands - ING, Qantas, Virgin Money and Coles Insurance.

About cyber security & digital forensics roles for ex-police

Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.