Senior Information Security Consultant

Tasks

• Coach teams to improve security maturity and culture
• Conduct application architecture and design risk assessments
• Coordinate security testing SAST DAST and dependency scanning
• Deliver risk based advisory
• Drive remediation plans for security gaps
• Educate stakeholders on technical and business risk
• Embed secure by design and secure SDLC
• Ensure change aligns with security architecture policies and standards
• Govern supplier and outsourced security processes
• Manage information security risks for projects systems APIs cloud services and third parties
• Oversee vulnerability triage and risk acceptance
• Perform threat modelling and security requirements
• Provide security consultancy
• Recommend secure code and pipeline controls
• Uplift security controls and assurance expectations

Perks/Benefits

• Banking benefits
• Insurance discounts
• Internal mobility
• Paid time off
• Professional development
• Purchased leave options
• Recognition
• School holiday subsidy
• Superannuation scheme
• Volunteer days
• Wellbeing leave

Skills/Tech-stack

API Security | Application Security | CI/CD | CIS Controls | Cloud Security | Cyber Security | DAST | Dependency Scanning | ISO 27001 | ISO 27002 | Information security | NIST | OWASP | PCI DSS | Penetration Testing | Risk Assessment | Risk Management | SAST | Sarbanes-Oxley | Secure Architecture | Secure SDLC | Security Governance | Security Risk | Security Testing | Security risk assessment | Third Party | Third-Party Risk | Third-party risk management | Threat modeling | Vulnerability Management