Career opportunities

About the Role:

Cyber Security is one of EnergyAustralia’s top risks - part of our security strategy aims to significantly increase cyber security maturity across the organisation.

The Technology and Cyber Risk and Assurance Specialist plays a key role in supporting the delivery of EnergyAustralia’s risk management and assurance activities across IT and OT environment. Responsibilities include:

• Facilitate cyber incident response simulations in collaboration with an outsourced provide - act as the primary liaison between EnergyAustralia teams and the simulation vendor to co-design scenarios, ensure participation of relevant stakeholders, and help track post-exercise outcomes.
• Support the delivery of risk assessments and assurance reviews across both IT and OT environments in technology and cyber risk.
• Work closely with internal stakeholders such as Risk, Enterprise Risk, Technical Assurance, and Compliance to align on risk treatment and assurance expectations
• Identify and document risks, control gaps, and residual exposures
• Assist in the development of metrics and dashboards to track risk posture, simulation maturity, and assurance coverage

About You:

You will have minimum 5 years working in a cyber security role (Analyst, Assurance, Specialist etc) or can demonstrate knowledge of cyber risk management frameworks & processes. Additionally:

• A recognised university degree in Computer Science, Information Technology, or equivalent experience
• Working knowledge of incident response planning and simulation best practices
  • Coordinating or supporting cyber simulations or business continuity exercises is advantageous

• Knowledge of the Australian Energy Sector Cyber Security Framework (AESCSF) and the Security of Critical Infrastructure (SOCI) Act.
• Familiar with ASD Essential 8, NIST, AESCSF, PCI DSS and similar security frameworks.
• Strong written and verbal communication skills, including the ability to gather and critically evaluate information and prepare written documents that clearly and concisely identify the issues presented and their proposed resolution.
• Strong reasoning competency to investigate, analyse and draw appropriate conclusions – we are looking for an inquisitive and analytical mind.
• Relevant industry certifications such as CISA, CISM, or CISSP.
• Certifications in incident response are a plus.

Why join the Cyber Risk Team:

• Purpose with impact
• The team is at the forefront of navigating complex challenges in a critical sector. The assurance you provide doesn’t just mitigate risks; it ensures the trust our customers place in us to deliver reliable, secure and sustainable energy without compromise
• Trusted Expertise 
• You’ll work alongside highly skilled professionals who value diverse perspectives and innovative ideas
• Opportunities for growth
• You’ll have access to cutting edge technology, opportunities to lead and contribute to high impact projects and training programs and industry certificates to enhance your expertise

How to Apply:

If you’re ready to ‘light the way’ towards your next career move, click the 'Apply’ button to submit a confidential application. For any questions, please reach out to Jock Clydesdale, Talent Acquisition Partner @ jock.clydesdale@energyaustralia.com.au

Why Us:

At EnergyAustralia, we are committed to providing an inclusive culture so our employees can bring their whole selves to work and have a sense of belonging. As an employee you can enjoy such benefits as:

• Employee discount on your electricity and gas, discounts on major brands and products
• Energise Program - flexible working that is team centric enabling all individuals to agree and succeed together
• Excellent company culture, down-to-earth and friendly organisation - be authentic, bring your whole self to work!
• 2 paid recharge days
• State-of-the-art Melbourne office, stunning views only 3-4 minute walk from Southern Cross station
• Onsite Tech Bar

We’re committed to providing an inclusive culture so our employees can bring their whole selves to work and have a sense of belonging. From our PRISM network that creates a positive culture for LGBTQ+ employees to our Reconciliation Action Plan that has commitments to strengthen relationships with Aboriginal and Torres Strait Islander people and organisations, it’s a workplace where everyone’s welcome.