Career Opportunities

At Whiddon, cyber security isn't just about protecting systems behind the scenes. The technology you secure supports our people every day to deliver care and services to residents, clients and families. 

We've invested significantly in our cyber security capability, with an established program spanning Microsoft security technologies, managed detection and response, vulnerability and patch management, penetration testing, identity security and the Essential Eight. Whiddon has invested in AI, automation, cloud and data technologies that are changing the way we work and support the delivery of aged care. As these capabilities continue to expand, you'll help ensure they are introduced and operated securely and responsibly. 

If you want to solve challenging technical problems, implement real security improvements and see the difference your work makes, this could be the role for you. 

Reporting to the ICT Operations Manager, you'll be the go-to cyber security subject matter expert within ICT, working closely with our Infrastructure, Applications, Data and Service Delivery teams and our technology and security partners. You will oversee our Managed SOC and ensure prompt and effective outcomes across the Cyber security spectrum. This is a hands-on technical role. You won't simply identify risks and tell others what needs to change. You'll get into the technology, investigate the problem and help implement the solution. 

What you'll be doing 

As Whiddon's dedicated cyber security professional, you'll take a hands-on role in protecting and strengthening our technology environment while helping shape our cyber security capability. 

• Implement, configure and continuously improve security controls across endpoints, servers, identity, Microsoft 365, Azure, cloud services and supporting infrastructure. 
• Investigate and respond to cyber security incidents and threats, including technical analysis, containment, remediation, recovery and root-cause investigation. 
• Configure and tune Microsoft Sentinel, SIEM, EDR/XDR and security monitoring capabilities, improving detections, alerting, logging and security use cases. 
• Assess emerging CVEs, identify Whiddon’s exposure and drive vulnerability remediation across endpoints, servers, applications and third-party services. 
• Implement and maintain controls across Microsoft Entra ID, Microsoft 365, Azure, Intune and Microsoft Defender, including MFA, Conditional Access, privileged access and identity protection. 
• Work alongside Infrastructure to assess and strengthen firewall, network, server and remote-access security controls, including next-generation firewall technologies. 
• Harden endpoints and servers through security baselines, attack surface reduction, application control, endpoint protection, secure configuration and risk-based patching. 
• Undertake security testing, technical validation and remediation arising from penetration tests, vulnerability assessments and security reviews. 
• Continue to mature controls aligned with recognised frameworks, including the ASD Essential Eight and NIST Cybersecurity Framework, while strengthening email security, data protection and secure access. 
• Take security improvements from assessment through technical design, testing, change management, deployment and validation, working with other ICT teams where changes span multiple platforms. 
• Embed security into new projects, platforms and technology changes from the outset, including practical controls for Whiddon’s expanding AI, automation, SaaS and cloud capabilities. 
• Contribute to cyber incident response, disaster recovery and technology resilience, including developing, maintaining and testing security playbooks. 
• Support cyber risk, compliance and assurance activities, including security assessments, audit and cyber insurance requirements, translating technical findings into clear risks and remediation actions. 
• Develop meaningful cyber security reporting and awareness initiatives that drive action, strengthen security culture and support continuous improvement. 
• Act as the go-to cyber security specialist within ICT, providing practical technical guidance while remaining hands-on in implementing solutions. 

What you'll bring 

We're looking for a hands-on cyber security professional who enjoys solving problems and seeing improvements through from identification to implementation. 

• A minimum of 3 years' hands-on cyber security experience across security operations, incident response, security engineering or a related role. 
• Strong technical capability across Microsoft security technologies, ideally including Entra ID, Azure, Microsoft 365, Microsoft Defender and Intune. 
• Practical experience with SIEM and EDR/XDR technologies, together with exposure to identity protection, email security, data protection, IPS and next-generation firewalls. 
• Experience investigating security threats and incidents and undertaking technical containment, remediation and recovery. 
• Strong knowledge of vulnerability management, patching, CVE assessment, security hardening and remediation. 
• Good knowledge of identity and access management, including MFA, Conditional Access and privileged access. 
• Working knowledge of the ASD Essential Eight, NIST Cybersecurity Framework or similar recognised security frameworks. 
• A strong understanding of contemporary cyber threats, attack techniques and defensive security practices. 
• The ability to take an identified security risk or requirement and turn it into a practical technical solution, implement it and validate that it works. 
• Strong analytical and problem-solving skills, with the curiosity to dig deeper and understand how and why something happened, not simply close an alert. 
• The ability to communicate technical security risks and solutions clearly to technical and non-technical stakeholders. 
• A collaborative mindset and the confidence to work across different ICT disciplines while taking ownership of cyber security issues. 
• A genuine interest in AI, automation, cloud and emerging technologies, including the evolving security challenges they introduce. 
• A National Criminal History Record Check, or willingness to obtain one. 
• Experience in aged care, healthcare or another highly regulated environment will be highly regarded, but isn't essential. 

This is a permanent full-time role based at Glenfield, NSW.