Telstra is Australia's leading communications provider and an employer of choice, with a reputation for being first to market with innovative products using emerging technologies. We are currently seeking the talents of an experienced ISMS & Risk Management Specialist to develop, implement and manage an ISO/IEC 27001 Information Security Management System (ISMS).
The successful candidate will join a high-performance team of four in applying the AS/NZS 4360 Risk Management methodology to achieve and maintain certification of Telstra products to relevant security standards.
Key Accountabilities: - Maintain a fully documented Information Security Management System by undertaking scheduled tasks and activities individually and in partnership with the relevant stakeholders of certified products.
- Conduct Risk Management practices in accordance with Telstra's (AZ/NZS 4360 aligned) risk methodology procedures.
- Conduct an internal auditing schedule across Telstra (Common Services) and any specific Business Unit services (ie certified product or platforms) to demonstrate compliance to company policy and as per the ISMS Security Calendar.
- Participate in ISMS Risk Reviews and manage the Risk Register
- Enforce Company Security Directives and the Telstra Information Security Controls Framework and other applicable standards to the certified products.
- Communicate and enforce ISMS Policy and Plans as defined in the ISMS Scope & Policy documents.
- Develop and maintain the ISMS Audit Plan in line with ISMS requirements and commendations to govern internal auditing activities as per ISMS Security Calendar or as necessary.
Essential Attributes: - Demonstrate a high level of personal motivation, initiative, enthusiasm and energy with a strong commitment to customer service and alignment to Telstra Values.
- Demonstrate a high level of understanding of the ISO/IEC standards required to maintain an ISMS based on ISO/IEC27001/AS 17799)
- Demonstrate an understanding of Risk Management (AS/NZS4360)
- Demonstrated team player, exhibiting the leadership to both manage in a crisis and well as embracing change.
- Demonstrated high level knowledge and understanding of network architecture, product technology domains and planning principles.
- Demonstrated ability to educate delivery teams on the benefits of adhering to good security practice.
When you think about Telstra, it's the people who make it a success so if you can see yourself excelling in this role hit the Apply Now button now!
Telstra, imagine the possibilities.
