Cyber Security Advice and Assessment Specialist: OSCA 271132

Conducts risk and security control assessments, interprets security policies, contributes to the development of standards and guidelines, reviews information system designs, provides guidance on security strategies to manage identified risks, provides specialist advice and explains systems security, strengths and weaknesses.

Skill level 1: Bachelor degree or higher, or at least 5 years of relevant experience

• Conducts risk and security control assessments and vulnerability testing to identify potential security risks and weaknesses in an organisation's cyber security policies
• Provides specialist advice and guidance on security strategies to manage identified risks and vulnerabilities
• Develops and implements security policies, procedures, and standards and guidelines to help organisations maintain a strong security position
• Undertakes investigations and reports on security incidents, and guides the refinement of practices and processes that increase the detection of security related incidents
• Assists in root cause analysis of security incidents and breaches to determine the extent of the damage, and recommend remedial actions
• Develops metrics to highlight the impact of cyber security risks on business processes and information assets
• Aligns and coordinates internal and external audit activities and security assessment engagements