Cyber Risk Manager

eHealth NSW; Willoughby City Council; Hybrid; AUD 154,000 - 183,000; Full time

Benefits offered by this job

Hybrid work options

Allocation day off per month

Salary packaging

Job summary

eHealth NSW is seeking a Cyber Risk Manager to lead governance, enterprise risk and compliance across a major program strengthening cyber resilience for NSW Health. You will partner with stakeholders across eHealth NSW and the Cyber Security directorate to embed risk practices and support informed decision-making.

The role requires extensive experience in technology risk and governance, with ISO 27001/31000 knowledge and ServiceNow exposure. Hybrid work options and a path for growth are offered.

Qualifications

• Information security and/or risk certifications desirable.
• Extensive experience in Technology Risk, Cyber Risk, IT Audit, Risk Management, or Governance roles.
• Experience leading governance, enterprise risk and compliance in a large, complex service environment.
• Strong cyber risk expertise applying ISO 27001 and ISO 31000.
• Knowledge of NSW Cyber Security Policy, SOCI Act CIRMP & the ACSC Essential Eight.
• Ability to identify and analyse enterprise risks and communicate to leadership.
• Experience with ServiceNow or similar ERM platforms.

Responsibilities

• Lead establishment and continuous improvement of an enterprise risk management framework aligned to NSW Health policy and global standards.
• Oversee the integrity and ongoing management of the enterprise risk register, ensuring timely, accurate and insightful reporting for stakeholders.
• Provide expert advice on governance, compliance and emerging cyber risk issues to senior leaders, executives and key stakeholders.
• Drive strong stakeholder engagement across the Cyber Security Uplift program, broader Cyber Security directorate and NSW Health to support informed decision-making and effective risk mitigation.
• Support governance and compliance processes, including information and record management practices, operational continuity and a constructive team culture.

Skills

Cyber risk

Governance

Risk management

IT audit

Stakeholder engagement

Education

CRISC

CISM

CISSP

ISO 27001 Lead Implementer

Tools

ServiceNow

Job description

Strengthen cyber resilience across Australia's largest public health system - with flexible work options and growth opportunities

• Temporary Full Time Exempt for up to 12 months
• Hybrid flexibility for work-life balance | Chatswood, St Leonards or Charlestown
• Attractive salary, from $153,559.00 - $182,954.00 + 12% Super + 17.5% annual leave loading

Applications Close: 11:59pm, Sunday 13 September 2026

Join the Team

As Cyber Risk Manager within our Cyber Security Uplift team, you will lead governance, enterprise risk and compliance across a major program of work that strengthens cyber resilience across NSW Health. You’ll partner with stakeholders across eHealth NSW, the Cyber Security directorate and the wider health system to embed best-practice risk management, support sound decision-making and help protect critical digital services.

In this role, you will:

• Lead the establishment and continuous improvement of a best-practice enterprise risk management framework aligned to NSW Health policy and global standards.
• Oversee the integrity and ongoing management of the enterprise risk register, ensuring timely, accurate and insightful reporting for stakeholders.
• Provide expert advice on governance, compliance and emerging cyber risk issues to senior leaders, executives and key stakeholders.
• Drive strong stakeholder engagement across the Cyber Security Uplift program, broader Cyber Security directorate and NSW Health to support informed decision-making and effective risk mitigation.
• Support governance and compliance processes, including information and record management practices, operational continuity and a constructive team culture.

View the position description here

About You

To be successful in this role, you’ll be someone who:

• Relevant information security and/or risk certifications desirable (e.g. CRISC, CISM, CISSP, ISO/EIC 27001 Lead Implementer).
• Extensive demonstrated experience in Technology Risk, Cyber Risk, IT Audit, Risk Management, or Governance roles
• Brings extensive experience leading governance, enterprise risk and compliance in a large, complex service environment, with relevant qualifications or equivalent experience.
• Has strong cyber risk expertise, including experience applying risk management principles aligned to ISO 27001 and ISO 31000.
• Detailed working knowledge of the NSW Cyber Security Policy, SOCI Act CIRMP & the ACSC Essential Eight.
• Can identify and analyse enterprise risks using sound judgement and root cause analysis, and confidently communicate recommendations to senior leaders, executives and boards.
• Builds trusted relationships, influences stakeholders effectively and works collaboratively across teams to drive good governance outcomes.
• Ideally has experience with ServiceNow or other enterprise risk management platforms.

Why work at eHealth NSW

At eHealth NSW, our benefits are designed to provide you with the flexibility, growth and support when you need it. We provide:

• Allocation day off per month in addition to annual leave
• Salary packaging to maximise your take-home pay
• Wellbeing initiatives like Fitness Passport to support your physical and mental health

Learn More About Us

• Find out how we hire at eHealth NSW
• Check out our diversity and inclusion commitment

Your work matters at eHealth NSW

As the digital centre of excellence for NSW Health, we design and deliver secure, scalable technology that supports patient care across the state, helping clinicians provide better healthcare, now and into the future.

Join eHealth NSW to create real-world impact, drive meaningful outcomes and support the health of millions every day. Learn more about us at eHealth NSW

• This recruitment may be used to establish a Talent Pool for similar roles (ongoing or temporary) that may arise over the next 18 months.
• To be eligible for this role you must have current Australian work rights (Australian citizen, permanent resident, New Zealand citizen with a current passport, or hold a valid visa with permission to work in Australia).
• For this role 'Exempt' is refers to a fixed term contract of more than 13 weeks.
• If you currently reside outside NSW, please indicate in your application whether you are willing to relocate if successful.