Information Security Officer
CurrentThe Information Security Officer supports the Senior Manager Information Security to assist in developing, operationalisation and maintaining the confidentiality, integrity and availability of the RSL Queensland Information assets and systems. Leading security functions such as performing audits for internal and external compliance requirements, monitoring conformance to policies and standards, providing incident response, testing and auditing, and providing advice and guidance to all business… Show more The Information Security Officer supports the Senior Manager Information Security to assist in developing, operationalisation and maintaining the confidentiality, integrity and availability of the RSL Queensland Information assets and systems. Leading security functions such as performing audits for internal and external compliance requirements, monitoring conformance to policies and standards, providing incident response, testing and auditing, and providing advice and guidance to all business units.Key Accountabilities:Security Governance & Management • Assist in the development, implementation, and maintenance of security governance, including security frameworks, policies, and standards for internal and external customer programs as required. • Assist in the development, implementation and maintenance of security procedures and practices to ensure commercial and legislative certification (PCI, Privacy Act etc.) • Investigate potential security threats and articulate implications on RSL systems and information assets. • Conduct threat analysis, threat risk assessments and vulnerability management programs.Projects & Solutions • Close working relationships with internal and external stakeholders to define security objectives to meet business requirements, including projects where required. • Provide inputs to security design, projects, solution architecture and programs of work as required by the RSL strategy and business objectives.Auditing & Education • Conduct routine audits to validate adherence to RSL Queensland Information Security Policies, Standards and external commercial and legislative needs. • Administer and deliver the RSL Information Security Awareness training and education program. Show less