Senior Cyber Security Specialist

NSW Health; Willoughby; Hybrid; AUD 148,000 - 176,000; Full time

Benefits offered by this job

Hybrid work arrangement

Salary package + superannuation

Job summary

NSW Health in Chatswood is seeking a Senior Cyber Security Specialist to lead a major cyber security uplift across Australia’s largest health system. The role offers hybrid flexibility, a competitive salary package, and opportunities to grow your expertise.

The position provides expert guidance on cyber security controls (ACSC Essential Eight, ISO/IEC 27001, IRAP) and supports ISMS development. It requires collaboration with project teams to embed security in design and delivery.

Qualifications

• Tertiary qualifications in Information Security or equivalent experience in a large ICT organisation.
• Strong understanding of ACSC Essential Eight, ISO/IEC 27001, IRAP, and NSW Cyber Security Policy.
• Experience with CyberArk Endpoint Privilege Manager (desirable).
• Able to assess technical risks and provide actionable recommendations.
• Proficiency with MS Office 365 and SharePoint.

Responsibilities

• Provide specialist advice on cyber security controls and requirements.
• Support ISMS implementation and continual improvement.
• Conduct technical risk assessments and mitigation recommendations.
• Partner with project teams to integrate security into design and delivery.
• Collaborate with technical teams to monitor threats and support incident response.
• Contribute to cyber security policies, procedures and awareness programmes.
• Stay current with emerging technologies and best practices.

Skills

ACSC Essential Eight

ISO/IEC 27001

IRAP

NSW Cyber Security Policy

Risk assessment

Office 365

SharePoint

Education

Tertiary qualifications in Information Security / Cyber Security

Tools

CyberArk EPM

Job description

Senior Cyber Security Specialist (Health Manager Level 4)

Shape a major cyber security uplift across Australia’s largest health system—while enjoying hybrid flexibility, an attractive salary package, and opportunities to grow your expertise.

• Temporary Full-Time Exempt for up to 30th June 2027, with the expectation to renew for the duration of the program.
• Hybrid flexibility for work-life balance from our modern Chatswood office
• Attractive salary, from $147,653 - $175,917 (commensurate with skills and experience) + 12% Super and 17.5% annual leave loading

Applications Close: 11:59pm, 9 November 2026

About Us – eHealth NSW

At eHealth NSW, we’re leading the digital transformation of Australia’s largest health system. As NSW Health’s digital centre of excellence, we design, build and support world-class ICT solutions that improve patient care across the state.

eHealth is implementing an NSW Health wide Cyber Security Uplift program. This multi-year strategic initiative is designed to enhance cyber resilience across the state's health system. We are working with Local Health Districts, Pillars, and Agencies to improve how we detect and respond to risks and to make sure everyone follows consistent security standards. By investing in modern technologies, governance frameworks, and workforce capability, NSW Health is proactively addressing the evolving cyber threat landscape to safeguard critical health services and patient data.

About the Opportunity

As a Senior Cyber Security Specialist, you will provide expert-level guidance on cyber security controls, support the implementation of security frameworks, and advise on technical risk mitigation strategies. This role is critical in developing and maintaining a secure digital environment across NSW Health, ensuring compliance with national and state cyber security standards.

In this role, you will:

• Provide specialist advice on cyber security controls, including ACSC Essential Eight and NSW Cyber Security Policy requirements.
• Support implementation and continuous improvement of Information Security Management Systems (ISMS).
• Conduct technical risk assessments and recommend mitigation strategies for digital health systems and infrastructure.
• Partner with project teams to integrate security requirements into solution design and delivery.
• Collaborate with technical teams to monitor emerging threats and support incident response activities.
• Contribute to the development of cyber security policies, procedures, and awareness programs.
• Stay abreast of emerging technologies and best practices to enhance NSW Health’s security posture.

About You

We are looking for someone with:

• Tertiary qualifications in Information Security, Cyber Security, or related discipline OR equivalent experience in implementing cyber security controls and frameworks within a large, complex ICT organisation.
• Strong understanding of ACSC Essential Eight, ISO/IEC 27001, IRAP, and NSW Cyber Security Policy.
• CyberArk Endpoint Privilege Manager (EPM) implementation experience is desirable.
• Ability to assess technical risks and provide actionable recommendations.
• Intermediate proficiency in Microsoft Office 365 (Word, Excel, PowerPoint) and SharePoint.
• Current NSW Driver’s Licence and willingness to travel as required.

Why work at eHealth NSW

At eHealth NSW, our benefits are designed to provide you with the flexibility, growth and support when you need it.

Learn More About Us

• To be eligible for this role you must have current Australian work rights (Australian citizen, permanent resident, New Zealand citizen with a current passport, or hold a valid visa with permission to work in Australia).
• 'Exempt' is refers to a fixed term contract of more than 13 weeks.
• If you currently reside outside NSW, please indicate in your application whether you are willing to relocate if successful.