Hiring Cyber Security Risk Advisory Lead – Sydney

Listen to this Post

Featured Image
Apply Here: https://lnkd.in/gcxETaFr

A leading organization is seeking a Cyber Security Risk Advisory Lead in Sydney to assess risks in major projects and supervise a team of Risk Advisors. The role requires expertise in AWS and Microsoft Azure, backed by certifications like CISSP or AWS Security Specialty. Candidates must be Sydney residents with PR or Citizenship, strong communication skills, and a commitment to staying in the role for at least 3 years.

You Should Know:

Key Technical Skills Required

1. Cloud Security (AWS & Azure)

  • AWS Security Best Practices:
    Check S3 bucket permissions 
    aws s3api get-bucket-acl --bucket <bucket-name>
    
    Enable AWS GuardDuty for threat detection 
    aws guardduty create-detector --enable
    
    Scan for public EC2 instances 
    aws ec2 describe-instances --query 'Reservations[].Instances[?PublicIpAddress!=null]' 
    

  • Azure Security Commands:

    List insecure storage accounts 
    Get-AzStorageAccount | Where-Object { $_.NetworkRuleSet.DefaultAction -eq "Allow" }
    
    Enable Microsoft Defender for Cloud 
    Set-AzSecurityPricing -Name "VirtualMachines" -PricingTier "Standard" 
    

2. Risk Assessment & Compliance

  • Use NIST CSF or ISO 27001 frameworks.
  • OpenSCAP for Linux Compliance:

    Install OpenSCAP 
    sudo apt install openscap-scanner
    
    Scan system against CIS benchmarks 
    sudo oscap xccdf eval --profile xccdf_org.ssgproject.content_profile_cis_level1 /usr/share/xml/scap/ssg/content/ssg-ubuntu2204-ds.xml 
    

3. Stakeholder Reporting with Automation