Senior Cyber Security Specialist

About the Role

This senior position is responsible for comprehensive cyber security engineering and incident response duties within a national law firm based in Melbourne CBD. The role offers a permanent position with hybrid working arrangements and a salary package around $180,000 including superannuation, alongside opportunities for leadership advancement.

You will collaborate closely with the Head of Security and IT Operations to enhance operational maturity and act as a primary escalation contact for internal teams, partners, and clients. This role provides a broad scope, encompassing security engineering, incident management, vulnerability oversight, and project execution across the firm’s enterprise environment.

Key Responsibilities

• Manage and execute cyber security operations, incident response, and vulnerability administration.
• Serve as the senior escalation authority for security incidents in partnership with an outsourced SOC, technology vendors, and internal groups.
• Drive the provision and improvement of security platforms like SIEM, EDR, email security, privileged access, application control, and vulnerability management.
• Contribute cyber security expertise to technology projects, including developing control requirements, implementation checklists, and remediation plans.
• Enhance operational documentation, processes, reporting, and provide control evidence aligned with standards such as ISO 27001, Essential Eight, ISM, and SOC 2.
• Engage effectively with senior leaders, partners, clients, and diverse technical stakeholders, including occasional support for critical incidents or changes outside normal hours.

Candidate Profile

• Minimum of six years’ experience in cyber security with strong practical skills in security engineering and incident response.
• Proficient in investigating, responding to, and resolving security incidents rather than only managing escalations or providing high-level advice.
• Hands-on experience with technologies including SIEM, EDR, vulnerability scanning, email security, application control, and privileged access management.
• Professional communication skills suitable for interacting with both technical and non-technical audiences, including senior executives and clients.
• Highly motivated self-starter who actively enhances documentation, formalises procedures, and takes initiative without needing close supervision.
• Holds relevant cyber security certification such as CISSP, CISM, CRISC, or equivalent; infrastructure or systems engineering background is a plus.

Additional Information

This role presents a valuable chance to undertake a senior cyber security position within a dynamic and supportive environment, contributing significantly to the firm's expanding security initiatives.