About this role
<p style="margin:0.0cm;font-size:12.0pt;font-family:Aptos, sans-serif"><span style="font-size:10.5pt;font-family:Arial, sans-serif">We are looking for an experienced <strong>Security Engineer</strong> to join the Technology team here at <strong>Merivale</strong>.</span></p> <p style="margin:0.0cm;font-size:12.0pt;font-family:Aptos, sans-serif"> </p> <p style="margin:0.0cm;font-size:12.0pt;font-family:Aptos, sans-serif"><span style="font-size:10.5pt;font-family:Arial, sans-serif">This is a hands-on role, responsible for helping shape, implement and continuously improve Merivale’s cyber security posture across a complex hybrid environment. You will work across on-premises infrastructure, Microsoft 365, Azure/Entra, AWS, networks, endpoints, identity, data protection and security awareness to help deliver a secure, resilient and fit-for-purpose technology environment.</span></p> <p style="margin:0.0cm;font-size:12.0pt;font-family:Aptos, sans-serif"> </p> <p style="margin:0.0cm;font-size:12.0pt;font-family:Aptos, sans-serif"><span style="font-size:10.5pt;font-family:Arial, sans-serif">This role sits within a business undergoing broad IT transformation, with a strong focus on building secure foundations, improving governance, reducing technology risk and enabling strategic change. It is ideal for someone who enjoys working across both technical delivery and practical security improvement, while partnering closely with technology teams, business stakeholders and external providers.</span></p> <p style="margin:0.0cm;font-size:12.0pt;font-family:Aptos, sans-serif"> </p> <p style="margin:0.0cm;font-size:12.0pt;font-family:Aptos, sans-serif"><strong><span style="font-size:10.5pt;font-family:Arial, sans-serif">Key Responsibilities</span></strong></p> <ul style="margin-bottom:0.0cm;margin-top:0.0px"> <li style="margin:0.0cm 0.0cm 0.0cm 0.0px;font-size:12.0pt;font-family:Aptos, sans-serif"><span style="font-size:10.5pt;font-family:Arial, sans-serif">Implement and improve cyber security controls across infrastructure, cloud, identity, endpoints, email and data.</span></li> <li style="margin:0.0cm 0.0cm 0.0cm 0.0px;font-size:12.0pt;font-family:Aptos, sans-serif"><span style="font-size:10.5pt;font-family:Arial, sans-serif">Support the uplift of Merivale’s hybrid security environment, including Microsoft 365, Azure/Entra, AWS and on-premises platforms.</span></li> <li style="margin:0.0cm 0.0cm 0.0cm 0.0px;font-size:12.0pt;font-family:Aptos, sans-serif"><span style="font-size:10.5pt;font-family:Arial, sans-serif">Strengthen identity and access management controls, including MFA, conditional access, privileged access and account lifecycle management.</span></li> <li style="margin:0.0cm 0.0cm 0.0cm 0.0px;font-size:12.0pt;font-family:Aptos, sans-serif"><span style="font-size:10.5pt;font-family:Arial, sans-serif">Support ISO 27001 alignment through policy development, control improvement, documentation, evidence gathering and audit readiness.</span></li> <li style="margin:0.0cm 0.0cm 0.0cm 0.0px;font-size:12.0pt;font-family:Aptos, sans-serif"><span style="font-size:10.5pt;font-family:Arial, sans-serif">Coordinate cyber risk assessments, control gap reviews, penetration test remediation and security improvement plans.</span></li> <li style="margin:0.0cm 0.0cm 0.0cm 0.0px;font-size:12.0pt;font-family:Aptos, sans-serif"><span style="font-size:10.5pt;font-family:Arial, sans-serif">Partner with internal technology teams and external providers to embed security best practice into projects, operations and vendor engagements.</span></li> <li style="margin:0.0cm 0.0cm 0.0cm 0.0px;font-size:12.0pt;font-family:Aptos, sans-serif"><span style="font-size:10.5pt;font-family:Arial, sans-serif">Support security operations across endpoint, email and collaboration platforms, including vulnerability management, hardening and incident response.</span></li> <li style="margin:0.0cm 0.0cm 0.0cm 0.0px;font-size:12.0pt;font-family:Aptos, sans-serif"><span style="font-size:10.5pt;font-family:Arial, sans-serif">Deliver security awareness initiatives, including phishing campaigns, staff education and reporting on behavioural risk trends.</span></li> <li style="margin:0.0cm 0.0cm 0.0cm 0.0px;font-size:12.0pt;font-family:Aptos, sans-serif"><span style="font-size:10.5pt;font-family:Arial, sans-serif">Contribute to business continuity, disaster recovery and third-party security risk reviews.</span></li> <li style="margin:0.0cm 0.0cm 0.0cm 0.0px;font-size:12.0pt;font-family:Aptos, sans-serif"><span style="font-size:10.5pt;font-family:Arial, sans-serif">Develop clear security reporting and metrics to track risk, control effectiveness and uplift progress.</span></li> </ul> <p style="margin:0.0cm;font-size:12.0pt;font-family:Aptos, sans-serif"> </p> <p style="margin:0.0cm;font-size:12.0pt;font-family:Aptos, sans-serif"><strong><span style="font-size:10.5pt;font-family:Arial, sans-serif">The Essentials</span></strong></p> <ul style="margin-bottom:0.0cm;margin-top:0.0px"> <li style="margin:0.0cm 0.0cm 0.0cm 0.0px;font-size:12.0pt;font-family:Aptos, sans-serif"><span style="font-size:10.5pt;font-family:Arial, sans-serif">Proven experience in security engineering, cyber security or senior information security roles within complex hybrid environments.</span></li> <li style="margin:0.0cm 0.0cm 0.0cm 0.0px;font-size:12.0pt;font-family:Aptos, sans-serif"><span style="font-size:10.5pt;font-family:Arial, sans-serif">Strong technical knowledge across network, endpoint, cloud, identity, email, vulnerability management and data protection.</span></li> <li style="margin:0.0cm 0.0cm 0.0cm 0.0px;font-size:12.0pt;font-family:Aptos, sans-serif"><span style="font-size:10.5pt;font-family:Arial, sans-serif">Experience securing Microsoft environments, including Microsoft 365, Defender, Intune, Entra ID, Exchange Online, Teams and SharePoint.</span></li> <li style="margin:0.0cm 0.0cm 0.0cm 0.0px;font-size:12.0pt;font-family:Aptos, sans-serif"><span style="font-size:10.5pt;font-family:Arial, sans-serif">Experience across Azure and AWS security, including identity, logging, configuration hardening, backup, resilience and access control.</span></li> <li style="margin:0.0cm 0.0cm 0.0cm 0.0px;font-size:12.0pt;font-family:Aptos, sans-serif"><span style="font-size:10.5pt;font-family:Arial, sans-serif">Practical understanding of ISO 27001 and experience supporting security controls, documentation and audit readiness.</span></li> <li style="margin:0.0cm 0.0cm 0.0cm 0.0px;font-size:12.0pt;font-family:Aptos, sans-serif"><span style="font-size:10.5pt;font-family:Arial, sans-serif">Strong documentation and communication skills, with the ability to translate technical risk into clear actions and updates.</span></li> <li style="margin:0.0cm 0.0cm 0.0cm 0.0px;font-size:12.0pt;font-family:Aptos, sans-serif"><span style="font-size:10.5pt;font-family:Arial, sans-serif">A pragmatic, commercially minded approach with the ability to balance risk reduction with operational realities.</span></li> <li style="margin:0.0cm 0.0cm 0.0cm 0.0px;font-size:12.0pt;font-family:Aptos, sans-serif"><span style="font-size:10.5pt;font-family:Arial, sans-serif">Relevant certifications such as CISSP, CISM, ISO 27001 Lead Implementer/Lead Auditor, CCSP, AZ-500, SC-100 or SC-200 will be highly regarded.</span></li> </ul> <p style="margin:0.0cm;font-size:12.0pt;font-family:Aptos, sans-serif"> </p> <p style="margin:0.0cm;font-size:12.0pt;font-family:Aptos, sans-serif"><strong><span style="font-size:10.5pt;font-family:Arial, sans-serif">Merivale Employee Benefits</span></strong></p> <ul style="margin-bottom:0.0cm;margin-top:0.0px"> <li style="margin:0.0cm 0.0cm 0.0cm 0.0px;font-size:12.0pt;font-family:Aptos, sans-serif"><span style="font-size:10.5pt;font-family:Arial, sans-serif">25% staff discount across 90+ Merivale venues.</span></li> <li style="margin:0.0cm 0.0cm 0.0cm 0.0px;font-size:12.0pt;font-family:Aptos, sans-serif"><span style="font-size:10.5pt;font-family:Arial, sans-serif">Exclusive monthly perks, staff-only rewards and events.</span></li> <li style="margin:0.0cm 0.0cm 0.0cm 0.0px;font-size:12.0pt;font-family:Aptos, sans-serif"><span style="font-size:10.5pt;font-family:Arial, sans-serif">Merivale Staff Cellar – access to premium wines at staff pricing.</span></li> <li style="margin:0.0cm 0.0cm 0.0cm 0.0px;font-size:12.0pt;font-family:Aptos, sans-serif"><span style="font-size:10.5pt;font-family:Arial, sans-serif">Unlimited career growth with endless development opportunities.</span></li> <li style="margin:0.0cm 0.0cm 0.0cm 0.0px;font-size:12.0pt;font-family:Aptos, sans-serif"><span style="font-size:10.5pt;font-family:Arial, sans-serif">Merivale Academy – online and in-person training, including Leadership & Performance, First Aid, Food Safety and more.</span></li> <li style="margin:0.0cm 0.0cm 0.0cm 0.0px;font-size:12.0pt;font-family:Aptos, sans-serif"><span style="font-size:10.5pt;font-family:Arial, sans-serif">Professional accreditation support – including Leadership qualifications.</span></li> <li style="margin:0.0cm 0.0cm 0.0cm 0.0px;font-size:12.0pt;font-family:Aptos, sans-serif"><span style="font-size:10.5pt;font-family:Arial, sans-serif">Employee Assistance Program – confidential wellbeing and mental health support, provided by Sonder.</span></li> <li style="margin:0.0cm 0.0cm 0.0cm 0.0px;font-size:12.0pt;font-family:Aptos, sans-serif"><span style="font-size:10.5pt;font-family:Arial, sans-serif">Employee Referral Program – earn rewards for bringing great people on board.</span></li> </ul>