Richard W.

Security Engineer

Hobart, Tasmania, Australia20 yrs 8 mos experience

Most Likely To SwitchHighly Stable

Key Highlights

Over 20 years of IT experience.
Expert in cybersecurity leadership and risk management.
Proven track record in building resilient security programs.

Stackforce AI infers this person is a Cybersecurity expert with a focus on risk management and cloud security.

Contact

Skills

Core Skills

CybersecurityRisk ManagementCloud SecurityIncident ManagementGovernance

Other Skills

CisspSecurity ManagementCertified Information Security Manager (CISM)ISO 27001Security Incident ManagementCertified in Risk and Information Systems Control (CRISC)IAMCI/CDDefenderGuard DutyElasticCompliance ReportingInformation Security GovernanceIT Risk ManagementInformation Security

About

With over 20 years in IT, I specialise in cyber security leadership, risk management, and building resilient security programs. Holding a CISM, CRISC and CISSP, I bring a management, risk and controls lens to every engagement — translating business objectives into secure, scalable solutions across cloud and on-prem environments. I thrive on mentoring teams, shaping strategy, and reducing organisational risk.

Experience

20 yrs 8 mos

Total Experience

3 yrs 7 mos

Average Tenure

4 yrs 3 mos

Current Experience

Apra amcos

Senior Security Engineer

Jan 2022 – Present · 4 yrs 3 mos · Hobart, TAS

Senior security leader with 21 years in IT and 8+ years in cybersecurity, holding a trifecta of CISSP, CISM, and CRISC.
Owns security strategy end-to-end at APRA AMCOS — from cloud architecture and threat detection through to governance, AI security, and risk visibility in Australia's peak music rights organisation.
Cloud Security Architecture: Leads end-to-end security across AWS, Azure, and Prisma Cloud CSPM — enforcing least privilege, hardening IAM, classifying and monitoring sensitive data in cloud storage, and integrating runtime protection into CI/CD pipelines to secure containers and cloud-native workloads.
Security Monitoring & Incident Response: Primary threat detection and IR lead using Defender, Guard Duty and Elastic. Deployed automated threat response workflows, lifting Microsoft Secure Score from 44% to 84%.
Manages Nexon SOC partnership and serves as the 24/7 on-call escalation point.
SIEM & Threat Hunting: Built and maintains Elastic integrations across AWS, Entra, domain controllers, Linux systems, and endpoints. Conducts ongoing threat hunting and intelligence-driven detection tuning.
Vulnerability Management: Owns enterprise vulnerability management — triaging findings, driving high-priority remediation across teams, and maintaining compliance reporting across internal systems, AWS.and Azure
Governance & Compliance: Implementing ISO 27001 controls, submitting gap evidence and roadmaps, maintaining the company security risk register, and coordinating internal and external penetration tests.
AI Security: Organisation's subject matter expert on AI security — conducting 3rd party assessments and providing final security approval to the CITDO and senior staff members
Data Governance: Implementing Microsoft Purview and Prisma DSPM for data classification and governance controls.
Leadership: Recruited and mentors a junior security resource. Go-to technical escalation and participant in security lead panel discussions.

CisspSecurity ManagementCloud SecurityCertified Information Security Manager (CISM)ISO 27001Security Incident Management+3

Tasnetworks

Senior Infrastructure Engineer

Jul 2014 – Dec 2021 · 7 yrs 5 mos · Hobart

Responsible for managing and maintaining the IT infrastructure for TasNetworks and its clients, spanning multiple data centers in Hobart. I ensure the delivery of core infrastructure and cyber security services, while providing 24/7 on-call support.
Cybersecurity Operations: Conduct threat hunting and manage endpoint security using McAfee ePolicy Orchestrator, VirusScan, and Web Gateway.
Infrastructure Management: Oversaw virtualisation with VMware ESXi and managed Cisco UCS, Windows Servers (2016, 2019, 2022), and Active Directory.
Security Monitoring & Compliance: Utilise tools like Splunk Enterprise, Microsoft ATA, and Tenable.SC for vulnerability scanning and security patching.
Backup & Recovery: Administer CommVault Enterprise Backup and NetApp storage management to ensure data integrity.
Cloud & Virtual Services: Delivered infrastructure-as-a-service (IaaS) to multiple customers, with expertise
in Office 365, Exchange 2016, and Citrix XenApp/XenMobile.
Automation & Scripting: Managed configurations using SCCM, SCOM, and PowerShell to automate tasks and maintain system health.
Data Center Operations: Provided hardware maintenance and management for four data centers.
24/7 On-Call Sup

Aurora energy

Business Application Specialist

Jan 2013 – Jan 2014 · 1 yr · Hobart

As an applications analyst I became part of the technical team and volunteered to be part of several projects. Some included the Retail Reform Project consisting of upgrading Aurora's complex customer care and billing system. The upgrade of the companies Citrix XenApp farm, and completing the IT service delivery support model for the merge of Aurora Energy and Transend Networks to form TasNetworks.
Being customer focused and providing technical support to the business for applications and systems managed by the technical team
Completed projects and met time critical deadlines
Investigated, recommended, and developed enhancements to the supported systems or related systems
Assisted in ITIL processes within Incident, Problem, Change and Configuration Management
Provided 24/7 on call support for critical business applications.

Mystate bank

Business Application Specialist

Jan 2011 – Jan 2012 · 1 yr · Hobart, Tasmania, Australia

My duties were to improve our business applications and provide testing on new banking platforms.
Tested and released visa payWave
Worked with Bank branches across Tasmania to improve their operations.
Provided forensic information to the AFP

Cgi

Business Application Specialist

Jan 2009 – Jan 2013 · 4 yrs · Hobart

I have supported all of the core business applications for Hydro, Roaring 40s, Aurora and AETV including on call work on a fortnightly basis. I have worked closely with the system administrators and software vendors to provide support, software upgrades and change control for the majority of the corporate systems. I also supported the Hydro national electricity market (NEM) applications as these are critical to the business electricity trading and treated with the highest priority. I regularly communicate with clients to ensure they are up to date and are aware of the current status with incidents and change controls.
Provide 24x7 on call support for high and critical severity applications.
Internal promotion from the Helpdesk to Desktop to Applications.
Installing/upgrading software and related products in conjunction with Systems Administrators under change control.
Completion of multiple projects including various Citrix applications and the main Hydro server room hardware upgrade.
Monitor system resource usage ensuring satisfactory application performance.
Recommend changes to improve performance and implement.
Resolve all issues/problems relating to usage of applications.
Fault analysis, rectification and to provide root cause analysis to senior management.

Logica

2 roles

Desktop Support Consultant

Promoted

Jan 2007 – Jan 2009 · 2 yrs

Provide onsite second level support for Logica's Tasmanian clients across each of their sites. Companies included Roaring 40s, Hydro Tasmania, Entura Energy and Aurora Energy.
Responsibilities included ensuring KPI's were met; backup tape operations completed; time sheets and knowledge base articles kept up to date; keeping a concise, accurate, and timely record of communication with clients; installation, support and management of existing operation systems and software, as well as implementation of new operating systems and software; and logging of warranty calls to vendors.
Highly skilled in troubleshooting desktop hardware, software, LAN and operating system issues
Demonstrated ability to provide user support by means of remote access tools for customers in Melbourne, Brisbane and overseas
Ran the support for Roaring 40s solo and provided an exceptional level of service.
Provided on call desktop support and out of hours support

Service Desk Analyst

Jan 2005 – Jan 2007 · 2 yrs

Supported 50+ companies on an international scale.
Provided 1st and 2nd level technical support, meeting KPIs for a high amount of incidents and requests resolved by first contact
Remotely assisting and installing software using appropriate software tools
Managed user accounts in Active Directory and Citrix Management console
Provided service desk support in a 24x7 rotating roster
Ensured stability of corporate applications by running and managing system health checks