Cybersecurity Analyst (Health Manager Level 2)

Employment Type: 

• 1 x Permanent Full Time; 38 hours per week
• 1 x Temporary Full Time: 38 hours per week up to November 2028 
   

Position Classification: Health Manager Level 2 
Remuneration: $2,277.19 - $2,686.94 per week + Annual Leave Loading + Superannuation 
Location: SLHD District Wide Services; based at Forest Lodge 
Requisition ID: REQ681889 

In Sydney Local Health District our vision is Excellence in health and healthcare for all. You will be working in an innovative district that celebrates and invests in the ideas of staff, values people and offers life-long careers. Join the team at one of the leading public health organisations in Australia!

About the Role

The Cyber Security Analyst is responsible for monitoring, triaging, investigating and responding to cyber security alerts, incidents, vulnerabilities and service requests across the Sydney Local Health District environment. The role works closely with operational infrastructure, applications, service delivery, risk, project and cyber security teams to improve the District's cyber security posture and ensure compliance with NSW Health cyber security requirements. 

Key day to day activities include:

• Monitoring and responding to cyber security incidents and alerts. 
• Vulnerability assessment, remediation coordination and reporting. 
• Security investigations and root cause analysis. 
• Essential Eight implementation and compliance activities. 
• Security advisory services for projects and operational initiatives. 
• Preparation of cyber security risk assessments and recommendations. 
• Security monitoring, threat analysis and operational security activities. 
• Engagement with eHealth NSW Security Operations Centre and external vendors. 
• Development of reports, dashboards, executive briefings and operational metrics. 
• Participation in cyber incident response and cyber resilience exercises. 
• Participation in a 24x7 on call roster and provision of after-hours support as required. 

For more information, please view the Position Description.

Ideal Candidate

• Bachelor's degree and/or relevant certifications in Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Ethical Hacker (CEH) and/or relevant experience within the field of Computer Science, Information Security, or a related discipline with relevant experience in cybersecurity, with a focus on vulnerability management, incident response, threat analysis and security operations in complex environments, with proficiency in vulnerability scanning and assessment tools (e.g., Tenable.IO, Nessus, Qualys) (within the healthcare systems would be an advantage).
• Knowledge of incident response frameworks and best practices (e.g., NIST. ISO27001, NSWCP and Essential 8). 
• Knowledge of network and application security concepts, tools, detection and prevention systems (IDS/IPS) firewalls, Security Information and Event Management (SIEM) solutions and an understanding of cloud security principles and technologies (e.g., AWS, Azure, or GCP). 
• Ability to work independently, with excellent planning and organisational skills. Able to monitor security operations, including the identification, prioritisation, and response to security alerts, events, and incidents. 
• Healthcare experience is desirable but not essential. 
• Has the ability to work on a 5 day roster on an on-call roster and the ability to work at various locations within Sydney Local Health District when required.