Security Engineer in Sydney

As a Security Engineer - Assurance, you will play a key role in supporting security assurance, third-party security reviews, implementation of security standards, security projects and broader security operations activities. Working closely with business and technology stakeholders, you will help ensure security controls remain effective, security risks are appropriately managed and organisational security capabilities continue to mature. This role is ideally suited to a strong security generalist with an assurance and risk mindset who can deliver practical security outcomes across multiple technology domains.

On a day-to-day basis, you will:

• Interpret security policies, standards and control requirements and translate them into practical security assurance activities.
• Develop security metrics, dashboards and reporting to provide visibility of control effectiveness and risk.
• Analyse information from security and IT platforms to identify trends, risks and opportunities for improvement.
• Drive automation of security assurance, compliance validation, reporting and evidence collection activities to improve efficiency and quality outcomes.
• Own and continuously improve the third-party security risk management process, including supplier security assessments and remediation activities.
• Identify, document and communicate security risks, control gaps and remediation recommendations across the organisation.
• Support the delivery of security improvement initiatives, strategic projects and the implementation of new security capabilities, controls and technologies.
• Provide practical security guidance, deliver awareness initiatives and promote a positive security culture across the organisation.

The ideal candidate will have:

• Tertiary qualifications in a relevant technology discipline.
• Professional security certifications such as CISSP, Security+, MCSE Security or similar will be highly regarded.
• Demonstrated experience working within enterprise infrastructure and cloud environments, with a solid understanding of monitoring, logging and security operations.
• Strong understanding of information security principles, security controls, protocols and industry standards.
• Experience across identity and access management, vulnerability management, security monitoring and security governance and risk management practices.
• Proven experience using reporting, scripting, APIs, workflow automation or low-code/no-code tools to improve security assurance, compliance monitoring and operational efficiency.
• Excellent stakeholder engagement, communication and influencing skills, with the ability to build trusted relationships across technical and non-technical teams.
• Strong analytical and problem-solving skills, coupled with an ability to identify process improvement opportunities and deliver practical outcomes.
• A collaborative, proactive and commercially minded approach, with the ability to balance business needs and security risk.

During the recruitment process you may be required to complete pre-employment screening tests which include a criminal record check. At GWF we strive to create a place where everyone belongs, everyone is valued, and everyone has equal opportunity. We encourage applications from people of all ages, nationalities, abilities, and cultures - including Aboriginal and Torres Strait Islander peoples, the LGBTQI+ community and people living with disability. So we can get to know you in the best possible way, we're happy to adjust our recruitment process to support accessibility needs. Let us know your needs in providing a positive, barrier-free recruitment process.