IT Security Advisor

About the role

The IT Security Advisor (ITSA) leads the agency’s cyber security strategy, governance and operations. Reporting to senior executives, the ITSA provides independent advice to the Executive Board, CISO and CIO and works closely with the Protective Security team.

Key responsibilities

• Develop, implement and continuously improve cyber security strategy, policies and frameworks aligned with PSPF and ISM.
• Provide strategic advice on cyber risks, threats and mitigation to senior stakeholders.
• Oversee vendor‑managed SIEM, Virtual SOC, SIG and SEG functions and respond to active security threats.
• Drive agency‑wide security uplift initiatives, including IRAP assessments and Essential Eight maturity.
• Lead incident response capability, ensuring effective identification, containment, reporting and remediation.
• Coordinate cross‑agency collaboration with internal branches and external partners to strengthen security posture.
• Manage procurement and assurance activities for cyber security services such as penetration testing and managed security services.
• Ensure governance, audit readiness and evidence‑based reporting for internal and external audits.
• Provide leadership to multidisciplinary cyber security teams, fostering a high‑performance culture.

Required profile

• Australian citizenship.
• Proven experience leading cyber security strategy and operations at an enterprise or government level.
• Ability to advise senior executives and work collaboratively across multiple organisational units.
• Willingness to travel interstate as required.

Required skills

• SIEM management
• Virtual SOC, SIG and SEG operations
• IRAP assessment experience
• Penetration testing coordination
• Incident response planning and execution
• Security monitoring, auditing and reporting
• Risk management and security governance
• Development of security policies and frameworks (PSPF, ISM)