Information Security Analyst (App Security & AI Security)

BlueScope is a global manufacturer of building solutions with a focus on quality, technology, and customer-first innovation. The Information Security Analyst will support application and AI security, assess and mitigate information security risks, manage security controls and solutions, and maintain business continuity, disaster recovery, policies, training, and security programs.

Responsibilities:

• Provides the IS security function, including reviewing, planning and implementation, and management of security controls for the organization
• Creates and maintains the enterprise’s Business Continuity Plan and Disaster Recovery Plan
• Establishes a security stance through policy, architecture and training processes
• Oversees the operations of the enterprise’s security solutions
• Interfaces with peers in the development and network departments as well as with the leaders of the business units to both share the corporate security vision with those individuals and to solicit their involvement in achieving higher levels of enterprise security through information sharing and co-operation
• Leads the selection of appropriate security solutions, and oversees any vulnerability audits and assessments
• Manages security exemption processes, particularly where it involves shared risks to the company’s systems and data
• Establishment of a security risk register and maintain, with a plan to address key risks
• Produce and maintain a security program of work for a rolling 12-month period
• Create, and maintain the company’s security awareness training program
• Create and maintain the company’s security documents (policies, standards, baselines, guidelines and procedures)
• Create and maintain the company’s Business Continuity Plan and Disaster Recovery Plan
• Conduct and coordinate testing of procedures and systems every six months

Requirements:

• Bachelor's degree or 4 years of additional relevant experience in lieu of degree
• 5 years of experience in information security management or related functions
• Bachelor's degree in the field of business administration, computer science, finance, or information systems
• 7+ years of experience in information security management or related functions
• Information Security Management qualifications such as CISSP, CRISC or CISM