InfoSec Governance & Risk Lead

NSW Health; Sydney; On-site; AUD 140,000 - 190,000; Full time

Benefits offered by this job

Flexible working

Fitness Passport

Novated car lease

Salary sacrificing to Superannuation

Job summary

The Cancer Institute NSW is seeking an Information Security Program Lead to develop, implement and sustain the Institute’s Information Security Governance, Risk & Compliance Program, including security frameworks, policies and controls that reduce cyber security risk.

The role provides specialist advice on security architecture, cyber risk, emerging threats and compliance obligations to support government policy, industry standards and best practice.

Qualifications

• Experience leading information security governance, risk and compliance.
• Experience with ISO 27001, audit prep and audit response.
• Strong knowledge across core cyber security domains (identity, network, data, cloud).
• Ability to coordinate with stakeholders to drive security programs.

Responsibilities

• Lead information security governance, risk and compliance activities.
• Develop and maintain security frameworks, standards, policies and processes.
• Provide specialist advice on security architecture, cyber risk and compliance obligations.
• Support government policy, industry standards and best practice.
• Coordinate audits and assurance activities across IT projects.

Skills

Governance

ISO 27001

NIST

Essential Eight

IAM

Network Security

Application Security

Data Protection

Cloud Security

Security Architecture

Security Operations

Job description

The Cancer Institute NSW is seeking an Information Security Program Lead to develop, implement and sustain the Institute’s Information Security Governance, Risk & Compliance Program, including security frameworks, policies and controls that reduce cyber security risk.

The role provides specialist advice on security architecture, cyber risk, emerging threats and compliance obligations to support government policy, industry standards and best practice.