Information Security/Cybersecurity Operations Specialist at HESTA | Jobyssey

Bring your authentic and passionate self to this exceptional role #careerswithimpact

Join HESTA’s growing Information Security/Cybersecurity team and play a hands-on role in strengthening our cyber resilience. Reporting to the Manager, Information Security Operations, you’ll lead day-to-day security monitoring, threat detection, investigation and response, with a particular focus on Data Loss Prevention (DLP), insider risk and emerging AI threats. You’ll work across HESTA, with our MSSP/MDR and security partners to identify and respond to evolving threats - including data leakage to generative AI, prompt injection, shadow AI, agentic AI and adversarial use of AI.

What You’ll Do

Monitor, triage and investigate security alerts and incidents, supporting containment, eradication and recovery.
Operate and continuously improve DLP and insider risk controls, including investigation, tuning and exception management.
Detect and respond to AI-related security threats, including shadow AI and data leakage.
Conduct threat hunting and intelligence activities aligned to MITRE ATT&CK and emerging threats.
Support digital forensics and incident response activities.
Develop and tune SIEM/SOAR detection content and optimise SOC security platforms.
Partner with internal teams, MSSP/MDR providers and external security partners to strengthen cyber resilience.
Support HESTA’s information security obligations, including APRA CPS 234 and CPS 230.

What You’ll Bring

You’ll be an experienced Cybersecurity/Security Operations professional with:

Hands-on experience across DLP, security monitoring, incident response and threat detection.
Strong understanding of SIEM/SOAR, threat hunting and detection engineering.
Experience securing or monitoring generative and agentic AI, including data leakage, prompt injection and non-human identities - highly regarded.
Experience working with MSSP/MDR or outsourced security partners.
Knowledge of cloud, identity and access security and contemporary cyber security frameworks.
Understanding of the Australian regulatory environment, particularly CPS 234, CPS 230 and privacy requirements.
Relevant cybersecurity, IT or Computer Science qualifications and industry certifications are highly regarded.

This is an opportunity to work at the intersection of cybersecurity, data protection and emerging AI risk in a purpose-led organisation. If you’re curious, hands-on and passionate about staying ahead of an evolving threat landscape, we’d love to hear from you – Apply Now

Benefits that matter and make a difference for our employees

Leave for those moments that matter, an additional 6 days of leave at the end of year, up to 6 days paid volunteer leave, gender neutral paid parental leave of 20 weeks, Gender Affirmation leave, reproductive health and wellbeing leave, Cultural and Ceremonial leave. Access your LSL after 3 years, take AL at half pay, and purchase up to 2 weeks additional leave (just to name a few).
Your professional development matters, up to $5,000 per year professional development and up to 8 days professional development leave, HESTA scholarships and free access to a range of premium learning tools.
Your health and wellbeing matters, free annual flu shots and skin checks, incredible social events throughout the year and a comprehensive employee assistance program available 24/7.
Your financial wellbeing matters, up to 15% super, financial planning support, end of year payment for all Enterprise Agreement-covered employees, incentivised Employee Referral Program and novated lease options.

We celebrate, value and include people of all backgrounds, genders, identities, cultures and abilities. We welcome and support applications from First Nations people, physically, neuro or culturally diverse, LGBTQI+, and people of any age. We are proud to be WGEA accredited as an Employer of Choice for Gender Equity.

We want all candidates to feel safe, included and provided with the best opportunity to thrive, if you require reasonable adjustments during your application or throughout the recruitment process, please reach out to a member of the Talent team [email protected] and we’ll call you to discuss.

Please note: Applications via recruitment agencies will not be accepted for this position.

Information Security/Cybersecurity Operations Specialist

Similar jobs