Principal Advisor Information Security (Governance, Risk & Compliance)

Department of Transport and Main Roads; City of Brisbane; On-site; AUD 120,000 - 150,000; Full time

Job summary

Department of Transport and Main Roads in Brisbane seeks a Principal Advisor Information Security to lead governance, risk and compliance across ICT. You will provide strategic direction, develop controls, and ensure alignment with government standards.

The role emphasizes stakeholder briefing and cross‑agency collaboration. Permanent, full-time position based at Carseldine, with focus on policy adoption, awareness programs and continuous improvement of security maturity using ASD/ISO/NIST

Qualifications

• Experience developing ICT governance frameworks in information security or IT service delivery.
• Knowledge of Australian government security policies and international standards.
• Ability to brief senior stakeholders on risk trends and treatment priorities.

Responsibilities

• Lead information security governance, risk and compliance initiatives for the department.
• Develop and promote information security controls, policies and standards.
• Champion awareness and practical adoption of the security policy framework.
• Maintain contemporary security knowledge and support agile delivery.

Job description

Lead information security governance, risk and compliance for Transport and Main Roads. In this AO7 role, you will provide expert advice and strategic direction, strengthen consistent risk management practices, develop security controls, policies and standards, and brief senior stakeholders on risks, trends and treatment priorities.
You will also lead initiatives that build awareness and support practical adoption of TMR's information security policy framework.
As Principal Advisor Information Security (Governance, Risk & Compliance), you will provide expert advice and strategic direction for information security policy and governance across Transport and Main Roads (TMR). You will champion information security and deliver end-to-end advice and guidance informed by best practice and recognised Australian and international standards and strategies.
In this role, you will champion consistent information security risk management practices across TMR, including through the Information Security Community of Practice and other special interest groups aligned with TMR's risk framework and risk appetite. You will use governance, risk and compliance tools and evidence-based analysis to assess information security risks, prepare reports, and brief senior stakeholders on risk status, trends and treatment priorities.
You will develop, maintain and promote information security controls, policies and standards aligned with Queensland Government requirements and recognised industry practice. You will also lead communication, education, implementation and monitoring activities to improve awareness and adoption of TMR's information security policy framework. Maintaining contemporary information security knowledge and applying agile ways of working will be important in delivering practical governance, risk and compliance outcomes.
To thrive in this role, you will bring demonstrated experience developing, implementing and managing ICT governance frameworks in information security or IT service delivery and management. You will also have working knowledge of relevant standards and frameworks, such as the Queensland Government Information Security Policy, ISO/IEC 27000 series, the ASD Information Security Manual and Essential Eight, or the NIST Cybersecurity Framework.
The role is permanent, flexible full-time and based at Carseldine. A criminal history check will be undertaken before appointment because the role has access to sensitive data. TMR supports an inclusive workplace, career development and healthy work-life balance, and welcomes applicants from all backgrounds.
Closing Date: Friday, 16 October 2026
Occupational group IT & Telecommunications