Cyber Security Specialist
Overview
At Woolworths we are on a mission to maintain and develop a high-performing cyber and information security function in support of a complex business undergoing digital transformation. We are looking for a passionate Cybersecurity Specialist: Business Information Security to help strengthen security where business and technology meet, influence behaviour and drive practical security improvements. You’ll be working as part of the Business Information Security (BIS) team to defend Woolworths against cyber threats and information security risks.
Requirements
- A relevant tertiary qualification in Information Technology, Computer Science, Cybersecurity, Information Systems, Engineering, or a related discipline.
- A minimum of three (3) years’ relevant experience in cybersecurity, information security, or a closely related role.
- Demonstrable hands-on technical capability in implementing, configuring, operating, assessing, or supporting cybersecurity technologies and controls.
- Practical experience across multiple security domains, including identity and access management, data security and protection, third-party risk management, security awareness and culture, vulnerability management, and infrastructure security across network, cloud, platform, and endpoint environments.
- Strong working knowledge of cybersecurity principles, security architecture, technical control design, risk management practices, and commonly adopted security frameworks, standards, control libraries, and tools.
- Ability to interpret technical security findings, assess associated business risks, identify control gaps, and recommend practical remediation actions.
- Experience working with technical teams to investigate security issues, troubleshoot control-related challenges, and support the implementation and continuous improvement of security solutions and processes.
- Strong stakeholder engagement, communication, and interpersonal skills, with the ability to communicate technical security matters clearly to both technical and non-technical audiences while maintaining professionalism.
- Ability to work collaboratively across business, technology, risk, assurance, and third-party teams and to influence security outcomes without relying solely on direct authority.
- Evidence of active engagement with, and contribution to, the broader information security community through professional networks, knowledge sharing, industry events, research, mentoring, or similar activities.
Responsibilities
- Strengthen identity governance by supporting user access reviews.
How to apply
About this listing: SpanSam is an opportunity discovery service and is not the hiring employer unless explicitly stated. Application decisions and source-listing changes are controlled by the employer or institution.