Cybersecurity Lead

About Energy Safe Victoria (ESV)
Our purpose is to keep Victorians energy safe and ensure energy is used confidently. Through education, regulation and enforcement, we work to ensure that energy safety, supply and efficiency are a priority in Victoria and something our customers can be confident in. Our people come from a wide range of professions with diverse skills and experience driving the success of ESV
About the opportunity
We have an exciting opportunity for a Cybersecurity Lead who will contribute by: * Support the development and implementation of all aspects of the information security program based on the Victorian Protective Data Security Framework and standards. Including, but not limited to:

• Assist with the creation and update of security policies, standards and procedures
• Monitor compliance with all cyber policies and procedures.
• Participate in risk assessment and risk mitigation processes
• Assist with the ongoing security awareness training program.
• Support the information security risk management framework, including, but not limited to

• Liaise with the external Security Operation Centre to maintain awareness of threats and respond appropriately.
• Monitor vulnerabilities in ESV infrastructure and applications including Microsoft Azure, SaaS hosted and datacentre.
• Fix detected vulnerabilities to maintain a high-security standard.
• Identify cyber security concerns and recommend improvements to ESVs security controls
• Participate in or execute cyber security activities such as threat hunting, threat detection, phishing simulations, and incident response.
• Analyse and report on malicious behaviour and cyber attacks.
• Lead the development of cyber security reports and dashboards.
• Provide subject matter expertise and recommendations with the guidance of the Cybersecurity Manager to relevant key stakeholders across ESV.
• Participate in IT Service Management (ITSM) constant improvement.
• Educate and build awareness of users through delivery of cybersecurity training and awareness programs to improve ESV cybersecurity maturity and build ESV's capabilities at all levels.
• Monitor IT and security supply chains to ensure compliance with Victorian Government and ESV policies and contracts.
• Develop, maintain, and provide expert advice and recommendations to influence key decision makers on Information Security policies, standards, procedures to align with the ISMF and VPDSF across ESV through in-depth research, analysis, and assessments.
• Provide cyber security support and advice for digital solutions and platforms.

To be successful, you'll have:

• Relevant tertiary qualifications in Tertiary qualifications in information technology or similar plus Cyber security certifications e.g. CISSP, CISM, Microsoft SC-200
• Demonstrated experience in similar role in information security or related field.
• Extensive experience in information security, with a strong working knowledge of security frameworks and standards including VPDSS, Essential 8, ISO 27001, NIST.
• Extensive experience in Microsoft Azure and M365.
• Strong technical knowledge with networking, infrastructure, SaaS, Paas, IaaS, ITIL.
• Well-developed incident response and analytical problem-solving skills.
• Exceptional communication (verbal and written), interpersonal and stakeholder management skills to influence internal and external stakeholders, particularly with third-party / vendor management.
• Understanding of firewalls, proxies, SIEM, antivirus and IDPS concepts.
• Ability to identify and mitigate vulnerabilities and explain how to avoid them.
• Experience within the Victorian Government Public Sector, regulatory, energy or utilities environment (desired)
• Experience with computer network penetration testing and MITRE ATT&CK (desired)
• Experience of Microsoft Sentinel and KQL (desired)

How to apply
Please refer to the available position description to assess your suitability and submit your current resume and cover letter via the Apply button.
ESV will conduct relevant and required checks about applicants and the information provided with an application including reference checks, vaccination status check and a satisfactory National Police Check.
For a confidential discussion, please contact Human Resources via
Applications close at midnight on Monday 26 February 2024