Lead, Identity and Security Domain

Transport for NSW; Sydney; On-site; AUD 150,000 - 190,000; Full time

Job summary

Transport for NSW seeks a strategic Identity & Security Leader to own the architecture and multi-year roadmap for identity, access and security platforms protecting the agency's digital environment.

The role governs authentication, access management, privileged access, and directory services while aligning with cyber security frameworks and regulatory obligations. You’ll partner across security and delivery teams to balance protection with user experience.

Qualifications

• Industry certifications such as CISSP or CISM preferred.
• Experience in governing vendors to architectural standards and roadmaps.
• Strong grounding in cyber security frameworks and risk management.

Responsibilities

• Lead the Identity & Security domain strategy, target-state architecture and multi-year roadmap.
• Oversee identity governance, authentication, access management and directory services.
• Govern vendors and drive investment cases aligned to risk reduction and value.
• Set architectural standards and assurance to ensure secure-by-design solutions.
• Collaborate with Cyber Security and Enterprise Architecture to embed security by design.

Skills

Identity & security leadership

Identity & access management

Zero Trust

Security architecture

Risk management

Vendor governance

Education

Relevant IT/Cybersecurity degree

Job description

Organisation/Entity: Transport For NSW
Job category: Projects
Job location: Macquarie Park, NSW, AU, 2113
Job reference number: 108225
Employment type: Permanent Full-Time
Salary range: An attractive remuneration package.

In this role, you'll:

Lead the Identity & Security domain, owning the strategy, target-state architecture and multi-year roadmap for the identity, access and security platforms that protect Transport's digital environment.

This spans identity governance and administration, authentication and access management (including single sign-on, multi-factor and conditional access), privileged access, directory services, and the supporting security platforms.

You’ll act as the domain’s technical authority, setting and governing architecture standards, principles and blueprints, and providing assurance across all identity and security initiatives so solutions are secure-by-design, compliant and scalable.

You’ll govern managed service providers and key vendors to architectural intent, lead domain input into investment planning and business cases (tied to strategic risk reduction and value), and maintain modernisation and decommissioning roadmaps that address technical debt, platform lifecycle and emerging threats.

You’ll provide technical oversight to programs and projects, resolving complex risks and keeping delivery aligned to the target state and to cyber and regulatory obligations such as the NSW Cyber Security Policy and Essential Eight.

You’ll drive thought leadership on modern security architecture, including Zero Trust, identity-centric security and cloud-first access models.

You’ll partner closely with Cyber Security, Enterprise Architecture and delivery teams to ensure security is embedded by design into every solution, and engage senior stakeholders across the organisation to balance protection with user experience and operational efficiency.

About You

You’re an identity and security leader who operates at a strategic level, comfortable as the technical authority shaping standards, roadmaps and assurance, not just delivering solutions.

You bring deep expertise across identity and access management (governance, authentication, privileged access and directory services) and modern security architecture, with a strong grounding in cyber security frameworks and risk management.

You’re experienced in governing vendors and managed service providers to architectural standards, shaping investment cases and modernisation roadmaps, and embedding Zero Trust and identity‑centric principles across a large, complex enterprise.

You’re a credible, trusted advisor who can influence senior stakeholders, give frank advice under pressure, and deliver secure, compliant, scalable identity and access outcomes.

Essential requirements

Relevant Tertiary Qualifications In Information Technology Or Cybersecurity

Industry certifications such as CISSP, CISM, or equivalent

Employment screening checks as per government standards

Who We Are

Transport for NSW provides a safe, integrated, and efficient transport system. We connect people, communities and industry every day.

Sydney Metro delivers Australia’s biggest public transport project and first driverless railway. We engage with our customers and community, and contribute to vibrant and attractive places through station design, interchanges and precincts.

Join us

Our workforce is as diverse as the community we serve. If you’d like further information on our inclusion and diversity initiatives, visit Transport careers and learn more via Flexible work options and policy.

Applications close 11:59 PM Tuesday 22 September 2026.

Aboriginal people and people living with disability are supported throughout the recruitment process and at work, and we encourage you to apply. Visit Supporting Aboriginal People or Supporting People with Disability for more information or speak to your talent team member to arrange any adjustments to how you interact with us.

#tccsj

Job Segment

IT Architecture, Information Technology, Risk Management, User Experience, Web Design, Technology, Finance, Creative.