If I could recommend just one thing @blinky - I would consider making the requirements for tertiary education and/or the CISSP to be listed as desirable but not hard requirements (on the Seek advert this isn't clear).
For this kind of job at the end of the day, if the person is capably 'smart and get's stuff done' within the parameters of the role - then it probably shouldn't matter that they have one, the other, or both.
It might also widen the number of candidates up for you a little more to get the position hired quicker.
Best of luck! 👍
