Cyber Advisor (Information Security Manager) (PROJ-4404)

The Information Security Manager will contribute to ensuring the integrity and security of the Cloud program through active management and oversight of security controls, provision of advice and development of standards and documentation.

Job Duties and Responsibilities

• Provide information security leadership and guidance to a multi-disciplinary team whose responsibilities are to provide the highest standards of integrity and security over the design, construction and capabilities of Australia’s sovereign TS cloud platform.
• Be accountable for high-quality security reporting, policy or doctrine which may include analysis, detection and response statistics, security incidents and breaches and formal correspondence.
• Understand and advise on a range of information security matters including knowledge of domestic and international frameworks.
• Explain and apply complex information to drive and influence the improvement of security posture.
• Advocate and build effective relationships with stakeholders relating to the suitability and implementation of ICT and information security systems, policies, standards and guidelines.
• Evaluate and advise on information and ICT security practices and procedures to ensure compliance with relevant legislation, principals, policies, standards and guidelines.
• Evaluate practices and objectives to understand critical factors for project success and deliver continuous improvement to support trusted and secure delivery.

Technical skills

• Professional certification or training in Information Security Management is preferred.

Essential criteria

• Provide information security leadership and guidance to a multi-disciplinary team whose responsibilities are to provide the highest standards of integrity and security over the design, construction and capabilities of Australia’s sovereign TS cloud platform.
• Be accountable for high-quality security reporting, policy or doctrine which may include analysis, detection and response statistics, security incidents and breaches and formal correspondence.
• Understand and advise on a range of information security matters including knowledge of domestic and international frameworks.
• Explain and apply complex information to drive and influence the improvement of security posture.
• Advocate and build effective relationships with stakeholders relating to the suitability and implementation of ICT and information security systems, policies, standards and guidelines.
• Evaluate and advise on information and ICT security practices and procedures to ensure compliance with relevant legislation, principals, policies, standards and guidelines.

Desirable criteria

• Evaluate practices and objectives to understand critical factors for project success and deliver continuous improvement to support trusted and secure delivery.
• Engage and communicate effectively with a wide range of governance, security authority, NIC and Cloud Service Provider stakeholders in the conduct of the project team’s security assessment, assurance and authorisation activities.