Cyber Security Advice and Assessment Specialist
What the work is
Conducts risk and security control assessments, interprets security policies, contributes to the development of standards and guidelines, reviews information system designs, provides guidance on security strategies to manage identified risks, provides specialist advice and explains systems security, strengths and weaknesses.
Would you enjoy the work?
These are the main tasks in the official description. Mark how each one sounds to you.
- Conducts risk and security control assessments and vulnerability testing to identify potential security risks and weaknesses in an organisation's cyber security policies
- Provides specialist advice and guidance on security strategies to manage identified risks and vulnerabilities
- Develops and implements security policies, procedures, and standards and guidelines to help organisations maintain a strong security position
- Undertakes investigations and reports on security incidents, and guides the refinement of practices and processes that increase the detection of security related incidents
- Assists in root cause analysis of security incidents and breaches to determine the extent of the damage, and recommend remedial actions
- Develops metrics to highlight the impact of cyber security risks on business processes and information assets
- Aligns and coordinates internal and external audit activities and security assessment engagements
Try it
A simulation and a case study from this kind of work, set in the security team of a fictional freight and logistics company, working from an office and a monitoring room. They are fictional.
The kind of days you could have
Good days
- You spot something odd early, and it turns out to be a real problem you stopped in time
- A colleague reports a suspicious email, and you thank them in front of the team
- You explain a risk so clearly that a busy manager decides to fix it today
Hard days
- An alert goes off at 4:50pm on a Friday and nobody knows if it is real
- People feel blamed for a mistake, and stop telling you about the next one
- You are asked to make something both completely secure and instantly easy to use
Written by Career Calling as a general guide. Real roles vary by employer and place.
Work a mission
Step into a simulated workplace in this field, with a brief from your manager.
Description and tasks: Australian Bureau of Statistics, Occupation Standard Classification for Australia, 2024, Version 1.0 (opens another site), occupation 271132, used under a Creative Commons Attribution 4.0 licence. The skill guide above is our plain English summary.
