The Manager Cyber Security will provide expert capabilities to the Digital Business Centre (DBC) in the cyber and information security domain, in collaboration with the organisation's vendor partners, to support DBC delivering outstanding technology services for the organisation. This role will also be required to represent the Chief Technology and Information Officer (CTIO) in whole of government and industry forums in respect to Cyber and Information Security across the sector.

KEY RESPONSIBILITIES

• Develop, maintain and promote a Cyber and Information Security Management Framework to facilitate appropriate ongoing attention to the security (confidentiality, integrity and availability) of the organisation’s information resources and compliance obligations.
• Drive the security strategy and implement security related services, ensuring that the overall security strategy is aligned to the business needs.
• Provide high level technical expertise and advice to achieve specified business objectives including the facilitation and design of new policies, performing gap analysis and monitoring the security maturity level of information systems and procedures.
• Establish a security culture within the organisation and ensure security is maintained and updated through introduction and management of an appropriate controls environment.
• Develop and implement the delivery of policies, standards, guidelines, training and procedures regarding areas such as information security, cyber security, disaster recovery, records management, loss and fraud prevention and privacy, emergency and incident responses.
• Ensure architectural principles are applied during design to reduce risk and drive adoption and adherence to policy, standards and guidelines.
• Prepare and implement processes and solutions, including recommendations for the adoption of new information security technologies to manage and reduce the occurrence of security incidents and risks.
• Establish mechanisms for the ongoing capture and assessment of potential risks to the security of the organisation’s technology environment, facilitating the application of mitigating strategies where necessary, and reporting.
• Manage the continual improvement of security across the organisation by researching and investigating new trends in the industry on best practice cyber and information security process and assurance.
• Liaise with key internal and external stakeholders to ensure that the governance and compliance frameworks and practices applied within the oraganisation are aligned with whole of Qld Government and other relevant standards and compliance obligations.
• Contribute to the improvement and ongoing management of an Information Security Management System (ISMS) based on ISO 27001:2022, and threat and risk assessments for monitoring, detection, response, remediation.
• Coordinate DBC activities as required to address both internal and external cyber and information security audit assurance programs.
• Provide expert cyber security advice to digital and technology programs and project being undertaken by organisation.

QUALIFICATIONS

• CISSP (Highly desirable)
• CISM

The successful candidate will be required to attend the office, located in the Brisbane CBD, therefore candidates will need to reside with the Brisbane area (this role is not offered as a remote position).

Role will close Monday 17th March 2025.  Please ensure you include a Cover Letter along with your resume highlighting your skills and experience in line with the position requirements.

Graham Eather - graham.eather@troocoo.com