APS6 Cyber Security Officer

Australian Institute of Health and Welfare; Canberra; Hybrid; AUD 85,000 - 110,000; Full time

Benefits offered by this job

Flexible working arrangements

Generous superannuation & leave

Professional development opportunities

Remote work opportunities

Job summary

The Australian Institute of Health and Welfare (AIHW) is seeking an APS6 Cyber Security Officer to support the governance, risk and compliance function within our Cyber Security & Assurance Unit. You will work with ICT teams to identify security risks, develop controls, and drive secure-by-design practices across ICT environments.

Based in Canberra with options for remote work, the role requires strong analytical skills, clear communication, and the ability to translate policy requirements into

Qualifications

• Strong analytical skills and sound judgement.
• Clear and effective communication of security concepts.
• Ability to translate policy requirements into practical controls.

Responsibilities

• conduct security risk assessments
• support accreditation and assurance activities
• IT security policy development
• maintain security documentation
• monitor compliance with cyber security policies and control frameworks
• contribute technical expertise to vulnerability management, incident response, security tooling configuration, and continuous monitoring activities

Skills

Analytical

Judgement

Communication

Job description

The AIHW’s APS employee census results reflect the strength of our positive and supportive workplace culture. We continue to foster an inclusive, flexible and high-performing organisation where people are treated with respect and courtesy, and where diversity is recognised, valued, and celebrated. The results are a testament to the professionalism, commitment, and dedication of our staff, highlighting the strong connection they have to our purpose, our flexible ways of working, and the contribution we make to improving the health and welfare of Australians. We are also proud to be ranked among the top ten APS agencies, out of 112, for employee engagement, enabling innovation and wellbeing, demonstrating our ongoing commitment to creating a workplace where people can thrive and perform at their best. We are committed to creating genuine opportunities for everyone and we welcome applications from First Nations people, people with disability, LGBTIQA+, neurodiverse people and people from diverse cultural and linguistic backgrounds.

We offer a range of benefits including:

• access to flexible working arrangements to support your work/life balance
• attractive remuneration packages including generous superannuation and leave provisions
• challenging and fulfilling work where you can use your skills and expertise
• opportunities for professional development

The AIHW has offices in Canberra and Sydney and offers remote work opportunities for many roles. For more information, visit the Benefits of working for the AIHW page of our website. The ICT Group is the responsible for strategic ICT capability and the delivery of ICT services at the AIHW. The Cyber Security & Assurance Unit ensures that ICT services enable AIHW to securely execute its mission protecting critical data and upholding trust.

Security Remit

Our security remit spans the Australian Cyber Security Centre (ACSC) principles, including:

• Govern – Establishing robust security frameworks and policies
• Identify – Identify assets and associated security risks.
• Protect – Implementing security controls and safeguards
• Detect – Monitoring for threats and responding proactively
• Respond and Recover – Coordinating incident management and resolution

The Cyber Security & Assurance Unit is looking for an experienced APS6 Cyber Security Officer is responsible for supporting the development, implementation and continuous improvement of the AIHW’s cyber security governance, risk and compliance (GRC) activities, while also contributing to technical uplift initiatives across ICT environments. The role works both independently and as part of a multi-disciplinary cyber security team to ensure security risks are identified, assessed and managed in alignment with organisational objectives, relevant legislation, and the Protective Security Policy Framework (PSPF) and Australian Signals Directorate’s Information Security Manual (ISM).

Key Responsibilities

• conducting security risk assessments
• supporting accreditation and assurance activities
• IT security policy development
• maintaining security documentation
• monitoring compliance with cyber security policies and control frameworks
• The position also contributes technical expertise to assist with vulnerability management, incident response, security tooling configuration, and continuous monitoring activities

The APS6 Cyber Security Officer engages with internal stakeholders, project teams and external partners to provide security advice, translate policy requirements into practical controls, and support secure-by-design practices. The role requires strong analytical skills, sound judgement, and the ability to communicate complex security concepts in a clear and actionable manner.