Information Security Analyst

• Permanent Full Time
• $111k + super
• Footscray location| hybrid

About Greater Western Water

We’re water… and more.

GWW is a Victorian government owned water corporation that provides an essential service to some of the fastest-growing communities in Australia, stretching from Melbourne’s CBD to Lancefield in the north and Bacchus Marsh in the west. Click here to learn more

Benefits

• We embrace flexibility and connection with a balance of on-site and WFH
• Free onsite parking (subject to availability)
• Gender neutral, 16-week parental leave available from commencement
• Monthly work life balance day off to treat yourself (if full-time)
• Free income protection and salary continuance insurance
• Access to corporate health insurance deals with major providers
• Wellbeing, prayer, and sensory rooms in the Footscray and Sunbury office

The opportunity

As an Information Security Analyst, you will play a key role in safeguarding GWW’s information assets, technology environment, and digital systems. Responsible for monitoring and detecting cyber threats, you will proactively identify risks and implement effective security measures to protect the organisation from evolving cyber security challenges. Working closely with the broader Enterprise Security Team, you will collaborate to ensure robust, efficient, and fit-for-purpose security controls are in place, helping to maintain the confidentiality, integrity, and availability of GWW’s information and underlying IT and digital solutions. This is an exciting opportunity to contribute to a security-focused culture while supporting the resilience and continuous improvement of GWW’s cyber security capabilities.

You will be required to partake in a rotating roster for outside of hours work.

Responsibilities

• Monitor, detect, triage, analyse and respond to cyber security events and incidents, ensuring threats and vulnerabilities are proactively identified, investigated and remediated in a timely manner.
• Analyse evolving security requirements across the full lifecycle of security products and solutions, supporting installation, upgrades and ongoing optimisation to ensure controls remain effective and fit for purpose.
• Configure, maintain and troubleshoot security systems and technologies, providing support during and outside of business hours as required to maintain operational resilience.
• Participate in major incident response and recovery activities, maintaining incident response plans and playbooks to strengthen processes, preparedness and information sharing across the team.
• Contribute to the development and implementation of technical security solutions, including the evaluation of new tools and automation opportunities to reduce risk and improve operational efficiency.
• Research emerging cyber security trends and threats, applying critical thinking and analytical problem-solving skills to support the planning, delivery and continuous improvement of GWW’s information security capabilities.

Skills & Experience

• Proven knowledge of cyber security technologies and platforms, including SIEM, SOAR, Endpoint Detection and Response (EDR), email security, and cloud security solutions. Demonstrated understanding of cyber security frameworks and methodologies, including the MITRE ATT&CK Framework, and contemporary security standards such as ISO 27001, NIST, and the Microsoft Security Well-Architected Framework.
• Strong knowledge of Microsoft technologies, solutions and architecture, with the ability to apply security best practices across enterprise environments.
• Experience implementing, maintaining and operating security controls within a complex enterprise environment, supported by a sound understanding of IT practices including networking, asset management, application development and IT service management.
• Proven ability to identify, assess and respond to security risks, threats and vulnerabilities, with well-developed analytical, problem-solving and decision-making skills, and the ability to perform effectively under pressure.
• Bachelor's degree in Information Technology, Cyber Security or a related discipline (or equivalent experience), with relevant industry certifications (CISSP) highly regarded. Experience in security monitoring, incident detection and response, and exposure to Agile delivery methodologies will be advantageous.

See yourself thrive

Our vision for GWW is Thriving People and Country. We aim to be as diverse as the communities we serve and are deeply committed to building a workplace where everybody thrives. We’re supportive, inclusive, and friendly, and value everyone for who they are and what they can bring.  

We’re seeking applicants across all cultural backgrounds, genders, and abilities, and will make reasonable adjustments as required, so please talk to us about what you need.

Don’t meet every single requirement? If you’re excited about this role, we encourage you to apply.

Don’t delay your application, include your resume, and cover letter (no more than 1 page), shortlisting will commence early!

The successful candidate will be required to complete pre-employment checks, including reference checks, SOCI Check, a national police check, and verification of working rights in Australia.

Applications close: Tuesday, 11 August