Cyber Engineer

Our Opportunity

Work Location:  Perth, Western Australia.

Roster: Monday to Friday

The Cyber Security team is responsible for leading Fortescue's efforts to be a cyber resilient, safe and trusted organisation, by effectively managing risk across all assets enabled through technology (informational, industrial and operational).

The Data Protection Engineer plays a key role in protecting Fortescue’s sensitive and critical information. Reporting to the Superintendent of Cyber Risk Advisory, the role operates and improves data protection capabilities, supports the investigation of data security events, and partners with Technology and the business to reduce data protection risk across Fortescue’s information, industrial and operational environments.

Key Responsibilities

• Engineer, operate and optimise data protection capabilities, including Data Loss Prevention (DLP), Data Security Posture Management (DSPM), data discovery, classification and information protection.
• Configure, test and maintain Microsoft Purview and Netskope policies across endpoints, cloud services, collaboration platforms, email and other data channels.
• Support data protection across Azure, AWS and hybrid environments by identifying sensitive data, assessing exposure and improving protective controls.
• Investigate suspected data loss, inappropriate access and policy violations; coordinate evidence gathering, containment and remediation with relevant teams.
• Manage service requests, incidents, exceptions and BAU activities in line with agreed procedures, risk tolerances and service expectations.
• Develop technical requirements, use cases, integrations and automation; contribute to solution design, engineering standards, implementation plans and the Data Protection roadmap.
• Collaborate with Technology, Legal, Privacy, Risk, HR and business stakeholders to embed practical data protection controls, maintain control evidence and support regulatory obligations, while identifying opportunities for continuous improvement and alignment with the broader Cyber Security tooling strategy.

Qualifications and Experience

• Degree, diploma or relevant industry certification in Information Technology, Computer Science, Cyber Security, Engineering or a related discipline.
• Demonstrated experience engineering, implementing, operating or improving data protection, DLP or DSPM capabilities in a complex enterprise environment.
• Practical experience with Microsoft Purview and Netskope, including policy design, configuration, tuning, testing, monitoring and reporting.
• Experience protecting data across Azure, AWS and hybrid environments, with an understanding of cloud data stores, SaaS applications, endpoints and identity controls.
• Working knowledge of data discovery and classification, information protection, cloud security, endpoint security, SIEM/SOAR processes, incident response and broader cyber security tooling.
• Experience translating data protection requirements into resilient technical controls, integrations, automation, use cases, procedures and operational processes.
• Understanding of Australian privacy and data protection obligations, and the ability to apply risk-based security principles in a regulated environment.
• Strong engineering, analytical, problem-solving, communication and stakeholder engagement skills, with the ability to work effectively independently and as part of a team.

About Us

Be part of something big. Fortescue is leading the world with our plan to decarbonise our iron ore operations, projects that harness renewable energy and the development of technology that will change our planet forever.

Our Commitment

Fortescue celebrates individual strengths and team members are encouraged to bring their whole selves to work. Our global workforce drives and promotes an inclusive culture, both within our organisation and throughout the communities we interact with. Diverse backgrounds include First Nations Peoples, people with disabilities, LGBTQ+ community, gender, neurodiverse, cultural diversity, all age groups, and those with an intersectional or multiple diverse characteristics. We encourage candidates from all backgrounds to apply.

https://fortescue.com/careers 

Internal Candidates / Current Contractors please apply via Success Factors Careers Portal. For further information on how to apply please visit the Fortescue Hub. 

Fortescue reserves the right to close applications early should a suitable pool of candidates be identified. Fortescue will never contact you to ask for payment of any kind, whether directly or through a third party.