Senior Cyber Security Specialist

eHealth NSW; Willoughby; Hybrid; AUD 148,000 - 176,000; Full time

Job summary

eHealth NSW in Chatswood, NSW, is seeking a Senior Cyber Security Specialist (Health Manager Level 4) to lead a major cyber security uplift across Australia's largest health system. This hybrid role offers a competitive salary package and opportunities to grow expertise.

You will provide expert guidance on cyber security controls, support ISMS implementation, conduct risk assessments, and collaborate with project teams to embed security into solution design and delivery.

Qualifications

• Tertiary qualifications in Information Security or equivalent experience.
• Strong knowledge of ACSC Essential Eight, ISO/IEC 27001, IRAP and NSW Cyber Security Policy.
• Experience with CyberArk EPM is desirable.
• Ability to assess technical risks and provide actionable recommendations.

Responsibilities

• Provide specialist advice on cyber security controls, including Essential Eight and policy requirements.
• Support implementation and continuous improvement of ISMS.
• Conduct technical risk assessments and recommend mitigations for digital health systems.
• Partner with project teams to integrate security requirements into solution design and delivery.
• Collaborate with technical teams to monitor threats and support incident response activities.
• Contribute to development of cyber security policies, procedures and awareness programs.
• Stay current with emerging technologies and best practices to enhance security posture.

Skills

ACSC Essential Eight

ISO/IEC 27001

IRAP

NSW Cyber Security Policy

Risk assessment

Incident response

Education

Tertiary qualifications in Information Security

Tools

CyberArk Endpoint Privilege Manager (EPM)

Job description

Senior Cyber Security Specialist (Health Manager Level 4) Shape a major cyber security uplift across Australia's largest health system while enjoying hybrid flexibility, an attractive salary package, and opportunities to grow your expertise.

• Temporary Full-Time Exempt for up to 30th June 2027, with the expectation to renew for the duration of the program.
• Hybrid flexibility for work-life balance from our modern Chatswood office
• Attractive salary, from $147,653 - $175,917 (commensurate with skills and experience) + 12% Super and 17.5% annual leave loading
• Applications Close: 11:59pm, 9 November 2026

About Us - eHealth NSW

At eHealth NSW, we're leading the digital transformation of Australia's largest health system. As NSW Health's digital centre of excellence, we design, build and support world-class ICT solutions that improve patient care across the state. eHealth is implementing an NSW Health wide Cyber Security Uplift program.

This multi-year strategic initiative is designed to enhance cyber resilience across the state's health system. We are working with Local Health Districts, Pillars, and Agencies to improve how we detect and respond to risks and to make sure everyone follows consistent security standards. By investing in modern technologies, governance frameworks, and workforce capability, NSW Health is proactively addressing the evolving cyber threat landscape to safeguard critical health services and patient data.

About the Opportunity

As a Senior Cyber Security Specialist, you will provide expert-level guidance on cyber security controls, support the implementation of security frameworks, and advise on technical risk mitigation strategies. This role is critical in developing and maintaining a secure digital environment across NSW Health, ensuring compliance with national and state cyber security standards.

• Provide specialist advice on cyber security controls, including ACSC Essential Eight and NSW Cyber Security Policy requirements.
• Support implementation and continuous improvement of Information Security Management Systems (ISMS).
• Conduct technical risk assessments and recommend mitigation strategies for digital health systems and infrastructure.
• Partner with project teams to integrate security requirements into solution design and delivery.
• Collaborate with technical teams to monitor emerging threats and support incident response activities.
• Contribute to the development of cyber security policies, procedures, and awareness programs.
• Stay abreast of emerging technologies and best practices to enhance NSW Health's security posture.

About You

• Tertiary qualifications in Information Security, Cyber Security, or related discipline OR equivalent experience in implementing cyber security controls and frameworks within a large, complex ICT organisation.
• Strong understanding of ACSC Essential Eight, ISO/IEC 27001, IRAP, and NSW Cyber Security Policy.
• CyberArk Endpoint Privilege Manager (EPM) implementation experience is desirable.
• Ability to assess technical risks and provide actionable recommendations.
• Intermediate proficiency in Microsoft Office 365 (Word, Excel, PowerPoint) and SharePoint.
• Current NSW Driver's Licence and willingness to travel as required.

Why work at eHealth NSW

At eHealth NSW, our benefits are designed to provide you with the flexibility, growth and support when you need it.

• Find out how we hire at eHealth NSW
• Check out our diversity and inclusion commitment
• Learn more about us at eHealth NSW

Important information

• This recruitment may be used to establish a Talent Pool for similar roles (ongoing or temporary) that may arise over the next 18 months.
• To be eligible for this role you must have current Australian work rights (Australian citizen, permanent resident, New Zealand citizen with a current passport, or hold a valid visa with permission to work in Australia).
• For this role 'Exempt' is refers to a fixed term contract of more than 13 weeks.
• If you currently reside outside NSW, please indicate in your application whether you are willing to relocate if successful.