Head of Information Security

Enterprise clients outsource service desk, end-user support and data centre operations to us under multi-year contracts. Headquartered in Perth, the company has grown since 2013 by acquiring regional IT providers. Our dress code is a company polo and clean jeans.

The role:

Graham IT is hiring for the Head of Information Security role to secure our cloud infrastructure and the applications that run on it. The work is on site and cannot be done remotely.

Essential duties and responsibilities:

• Run threat modelling sessions with engineering teams on new features and architecture changes.
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security.
• Own secrets management, key rotation and KMS policies.
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub.
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID.

What you need:

• 8+ years in security engineering, application security or a related engineering role.
• Good judgment on risk: knowing what to fix now and what can wait.
• Ability to explain security issues to engineers without lecturing them.
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)
• Programming or scripting ability in Python, Go or similar.
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities.

Preferred:

• Malware analysis or digital forensics background.
• Contributions to security tools or published CVEs.
• Kubernetes and container security (Falco, OPA Gatekeeper)
• IaC scanning with Checkov or tfsec.

Salary: $300,000 - $360,000 per year

What you get:

• Superannuation on top of salary.
• 17.5% leave loading.
• Annual bonus.
• Novated leasing.
• Salary packaging.
• Employee assistance program.

You must have full working rights in Australia.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Graham IT.