Chief Information Security Officer (PROJ-4509)
Job Description
Remote is seeking an experienced Chief Information Security Officer to join our team and our expansion into the Northern Territory. This role will make a vital contribution to Power and Water’s Cyber Security team within the broader Information, Communication, and Technology (ICT) business unit.
The Chief Information Security Officer will be responsible for leading, facilitating, documenting, designing, planning, and delivering Power and Water’s cyber security strategy and associated implementation plans including the compliance requirements and work that supports the organisation’s current needs. (RFT0403)
Role Description
The Chief Information Security Officer will work in collaboration with the GM Technology & Systems with key responsibilities for the:
- Assessment of cyber security strategy, policies and posture across IT and OT
- Risk and threat landscape assessment across critical infrastructure
- Development of strategic roadmap incorporating regulatory requirements (SOCI SP-2), emerging threats and business goals
- Alignment with business resilience, operational continuity and digital transformation programs
- Assessment of IT/OT cyber security integration, including convergence challenges and maturity levels
- Assessment of team structure to support current and future cyber programs and operations
- Review of cyber security service providers, including assessment of current gap in cyber services
- Provide mentoring and development plans for cyber teams
- Deliver cybersecurity briefings and updates to senior managers as required
- Provide regular strategic position monthly reports and final report with uplift recommendations
The Chief Information Security Officer will have the following skills and experience:
- Strong leadership and proven ability to lead diverse teams
- Experience in cyber team right sizing
- Experience in working with service providers to improve cyber resilience
- Over 10 years’ experience in cyber security within corporate organisations
- Detailed understanding of cyber security frameworks and standards including regulatory and legal knowledge
- Certified Information Systems Security Professional (CISSP) or equivalent accreditation
- Experience in the successful implementation of OT projects and initiatives across critical infrastructure
- Detailed knowledge of the SOCI Act and risk management obligations
- Strong leadership and executive influencing skills
The successful candidate must be available to travel to Darwin and engage with stakeholders on site on occasion.