The posting
Job Summary:
We are seeking a skilled Security Analyst reporting to our Group Head of Technology that will play a critical role in protecting our organisation's information systems and data. This position will be responsible for managing our security infrastructure, responding to threats, and ensuring our security posture remains robust and compliant with industry standards.
Key accountabilities
Security Platform Management
- Administer and manage CrowdStrike security platform, including deployment, configuration, and optimization
- Monitor security alerts and events through CrowdStrike console
- Perform regular health checks and ensure platform updates are applied
- Manage endpoint detection and response (EDR) activities
- Configure and fine-tune detection rules and policies
Threat Detection & Response
- Monitor, analyse, and respond to security incidents and alerts
- Investigate suspicious activities and potential security breaches
- Perform root cause analysis on security incidents
- Document incident response procedures and maintain incident logs
- Implement remediation measures and track resolution progress
Security Reporting & Communication
- Prepare regular security status reports for management
- Provide updates on security metrics, incidents, and trends
- Generate monthly and quarterly security dashboards
- Present findings and recommendations to stakeholders
- Respond to internal and external due diligence queries regarding security controls and practices
Threat Intelligence & Awareness
- Stay current with emerging security threats, vulnerabilities, and attack vectors
- Monitor threat intelligence feeds and security advisories
- Assess the relevance and impact of new threats to the organisation
- Share threat intelligence insights with the team
- Recommend proactive security measures based on threat landscape
Security Testing & Compliance
- Coordinate and manage annual penetration testing exercises
- Work with external security assessors and penetration testers
- Review penetration test findings and develop remediation plans
- Track and verify remediation of identified vulnerabilities
- Conduct annual Essential Eight security maturity assessments
- Ensure compliance with Essential Eight framework requirements
- Document security controls and maintain compliance evidence
Vulnerability Management
- Conduct regular vulnerability scans and assessments
- Prioritise vulnerabilities based on risk and business impact
- Track remediation efforts and coordinate with IT teams
- Maintain vulnerability management database and reporting
- Verify patch compliance across systems and endpoints
Access Control & Identity Management
- Ensure principle of least privilege is maintained
- Monitor privileged account usage and activities
Security Monitoring & Log Analysis
- Review security logs from various systems and applications
- Correlate events across multiple security tools
- Identify anomalous behaviour and potential security issues
- Maintain and tune security monitoring rules and alerts
- Archive logs in compliance with retention policies
Security Tools Administration
- Manage antivirus, anti-malware, and endpoint protection solutions
- Administer firewalls, intrusion detection/prevention systems
- Maintain data loss prevention (DLP) tools
- Configure and manage web filtering and email security gateways
- Ensure security tools are properly integrated and functioning
Change Management & Configuration Review
- Review changes to critical systems for security implications
- Participate in change advisory board meetings
- Assess security impact of proposed system changes
- Verify security configurations align with hardening standards
- Maintain secure baseline configurations
Vendor & Third-Party Risk Management
- Assess security posture of vendors and third-party providers
- Review vendor security documentation and certifications
- Monitor compliance with contractual security requirements
- Participate in vendor security assessments
- Support procurement process with security evaluations
Backup & Disaster Recovery
- Verify security of backup systems and processes
- Test backup restoration procedures periodically
- Review disaster recovery and business continuity plans from a security perspective
- Ensure encrypted backups are maintained and accessible
- Participate in disaster recovery exercises
Documentation & Continuous Improvement
- Maintain security policies, procedures, and documentation
- Create and update security runbooks and playbooks
- Contribute to security awareness and training initiatives
- Develop security metrics and KPIs
- Identify opportunities for security process improvements
- Participate in security projects and initiatives
- Conduct security tabletop exercises
Essential
- 4+ years working in information security or cybersecurity operations
- Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related field
- Familiarity with fund management, non-bank lending industry and regulatory landscape.
- Hands-on experience with security monitoring and incident response
Desirable
- Relevant security certifications (Security+, CySA+, CEH, GCIH, or similar)
- CrowdStrike Certified Falcon Administrator or similar certification
- Experience with compliance frameworks (ISO 27001, NIST, CIS Controls)
- Familiarity with scripting languages (PowerShell, Python)
- Knowledge of Australian government security frameworks (ACSC, ISM)
- Ability to explain technical security concepts to non-technical stakeholders
- Proven experience with CrowdStrike or similar EDR/XDR platforms
- Strong understanding of security principles, threats, and vulnerabilities
- Knowledge of Windows and Linux operating systems
- Familiarity with network protocols, firewalls, and security technologies
- Experience with security information and event management (SIEM) tools
- Knowledge of penetration testing methodologies and vulnerability management
Personal
- A team player who demonstrates enthusiasm, resilience and ethical behaviour
- Ability to think outside the box while maintaining an unbiased, risk and analytically driven assessment of alternate options when decisioning applications.
- An ability to liaise well with others of all levels and source information and delegate efficiently
- Honest and open both in actions and words with a drive to achieve results without sacrificing culture
- Excellent written and verbal communication skills
- Strong attention to detail, a mature positive attitude and strong work ethic
Work Setup:
Shift: Dayshift Setup: Onsite Location: Pasig
By Applying, you give consent to collect, store, and/or process personal and/or sensitive information for the purpose of recruitment and employment may it be internal to Cobden & Carter International and/or to its clients.
