Security & GRC Specialist

Job Description:

DXC Technology (NYSE:DXC) - where brilliant people embrace change and seize opportunities to advance their careers and amplify customer success.

People are the heart of our business. We support each other and work as a team, globally and locally to deliver excellence for our customers and colleagues. We live in more than 70 countries, speak multiple languages and work with over 6,000 customers on almost every continent. We use the power of technology to deliver technology services that move the world. DXC.com

At DXC we pride ourselves on delivering excellence in everything we do. What this means for you is the opportunity to be a part of delivering innovative solutions and helping to solve real business problems for a wide variety of valued clients.

What you will be doing
Our client Cybersecurity team provides cyber advisory and analytic services to a range of Federal Government Departments. The candidate will be required to have a thorough understanding of cyber security risk management, governance, policy and process in a federal or state government context.
 

Essential Criteria

• Minimum 8 years professional experience in IT, with at least 3-5 years’ experience in an Information Security, Risk Management, Audit or equivalent discipline

• Bachelors or master’s degree or be able to demonstrate relevant work experience to demonstrate equivalency

• Knowledge of security standards such as the PSPF, ISM, Essential 8, DSPF, ISO 27000 series, NIST CSF and 800 series, CIS

• Experience collaborating with internal teams and clients to understand requirements and provide expert guidance on SAP security and compliance

• Security policy and procedure writing experience as they relate to core security artefacts defined in the ISM and PSPF

• Experience with solutions for design and implementation of Essential 8 controls and processes

• Experience working with IP networking, networking protocols and understanding of security related technologies

• Experience working with internet, web, application and network security techniques

• Experience working with relevant operating system security (Windows, Linux, etc.)

• Knowledge of, or performance of IRAP and system certification and accreditation

• Proven experience as a Cyber Security practitioner with relevant knowledge of GRC

• Knowledge of risk management methodologies

• Professional experience in developing a variety of technical documentation

• Ability to effectively communicate with a range of technical and non-technical stakeholders

• Support accreditation and compliance in the relevant department

• Current NV1 security clearance (mandatory)
   

Desirable Criteria

• Cloud Security or Architecture experience, preferably Azure or AWS

• Experience in managing or leading a small team of security consultants

• Improve the level of security assurance where an organisation / department is interacting with third parties such as business, government and vendors

• Build on the capability to detect, deter and respond to cyber security threats

• Experience working as an IT Security Advisor, IT Security Manager, or IT Security Officer

• Ability to demonstrate study towards relevant security certifications such as CISSP, CISA, CISM, IRAP, GSEC

Our culture and benefits

DXC is committed to building better futures for our customers, colleagues, environment, and communities. We take care of each other and foster a culture of inclusion, belonging and corporate citizenship. We put this to action developing and implementing societal initiatives within our Social Impact Practice. #WeAreDXC
 

As an employer of choice, our “people first” philosophy means we offer competitive remuneration, benefits, training and career opportunities that reflect our commitment to improving the lives of our employees, and the communities in which we live and work.
 

How to apply & our commitment to you in return

If you would like to be part of a culture that drives innovation, delivers results, rewards performance and encourages ideas, then please press the "Apply Now" button to submit your resume.
 

In return, we agree to ensure a hiring process that is enjoyable, thorough, and fair. We strive to provide an environment that lets you thrive and show off the very best version of yourself, while learning about us at the same time.

Interviews and onboarding are conducted online, as part of us being a virtual-first company.
 

We are an Equal Opportunity Employer

DXC is proud to be an equal opportunity employer and we welcome submissions from people from all walks of life. We celebrate our diversity and recognise it is the unique contributions of our people that give us our edge.

Accommodation of special needs for qualified candidates may be considered within the framework of the DXC Accommodation Policy. In addition, DXC Technology is committed to working with and providing reasonable accommodation to support qualified individuals with physical and mental disabilities.

Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.