Cyber Security Culture and Awareness Manager - 12 month parental leave contract

Cyber Security Culture and Awareness Manager – 12 month parental leave contract

Aurecon

Category: Information & Communication Technology

Contract/Casual

Location: Melbourne, Brisbane

Work from home: Hybrid

Just imagine your future with us…

Aurecon is committed to creating an inclusive culture that embraces diversity, equity and inclusion – and we provide our people with flexible working opportunities.

We believe diverse teams enable us to solve our clients’ and society’s most complex problems in unconventional and distinctive ways. We offer flexible working as it enables all our employees to balance work and life in way that works for them.

Aurecon is an Employer of Choice for Gender Equality, as awarded by the Workplace Gender Equality Agency (Australia), and are a founding member of The Diversity Agenda in New Zealand. We also have a Reconciliation Action Plan and hold Silver Employer status in the Australian Workplace Equality Index for LGBTI+ inclusion. Across our company, inclusive leadership is role modelled from the top and is an expectation of all.

Our flexible way of working includes our flexible start and finish times, working from home, part time and job share options. Aurecon also offers 14 weeks paid parental leave, three weeks paid partner leave, and other health services and benefits.

If this is how you would like to work, you’d be a good fit, we’d love to hear from you. We welcome people of all identities from all background and with diverse accessibility needs. We’re curious about your career path and how we can support you to be your best.

The Role

Join our Information Security Office as a Cyber Culture and Awareness Manager where you will be driving the internal and external security culture and awareness activities to improve cyber resilience.

Here are the key things you will do to ‘bring ideas to life’.

• Develop and manage the on-going cyber security awareness program, planning up to 12 months in advance.
• Coordinate internal teams and third parties to provide specialist training programs, including organising periodic virtual and in-person awareness events.
• Analysing training requirements and delivering person-based training to address gaps.
• Manage phishing simulations including administration of the phishing simulation platform, reporting and co-ordinating education for phishing susceptible users.
• Support the identification of top people-related risks to the organisation and the behaviours that must change to mitigate those risks.
• Co-ordinating training and engagement events and campaigns to employees on best cyber security practices.
• Provide advice to management and stakeholders on a range of cyber security awareness and ISMS communication requirements.

What we are looking for

• Strong experience in IT consulting, risk management, relationship management or change management, will be valued.
• Experience with working with Business and IT process definition or continuous improvement methodologies and embedding new processes.
• Experience in Board & Executive reporting development and delivery.
• Excellent written and oral communication skills, with the ability to communicate effectively about abstract and complex topics to a range of audiences
• Demonstrated experience in Education and Awareness activities and campaigns
• Familiarity with good practice security frameworks such as ISO27001, ASD Top 8 or similar.

We value the difference each team member brings, and we look for people who have had a broad range of experiences and a growth and learning mindset.

About us

We’ve re-imagined engineering.

Aurecon is an international engineering, design, and advisory company, but not as you know it!

Drawing on our deep pool of expertise, we co-create innovative solutions with our clients to some of the world’s most complex challenges.

We listen deeply and intently, which helps us see opportunities, possibilities and potential others can’t. Think engineering. Think again.