Senior Cybersecurity Incidents Officer

NSW Health; Willoughby; Hybrid; AUD 124,000 - 151,000; Full time

Benefits offered by this job

Superannuation 12%

Annual leave loading 17.5%

Job summary

eHealth NSW, the digital centre of excellence for NSW Health, seeks a Senior Cyber Security Incident Officer to coordinate cyber incident response and forensics across NSW Health. This role offers hybrid flexibility and aims to strengthen cyber resilience while protecting patient data and ICT projects across the health system.

You will lead complex incidents, apply advanced security tooling, and collaborate with technical teams and executives to drive risk-based decisions, reports and escalation

Qualifications

• Extensive cyber incident response experience in a large, complex environment.
• Hands-on mastery of security tooling including SIEM, SOAR, EDR, forensics, log and network traffic analysis, IOCs, scripting and vulnerability management.
• Proven leadership of complex cyber incidents, coordinating resources, managing risks and delivering clear reporting.
• Excellent analytical and stakeholder engagement skills, influencing senior leaders and driving outcomes in high-pressure environments.

Responsibilities

• Coordinate and deliver cyber incident response and forensics across NSW Health.
• Apply cyber security analytical tools, methods, and procedures in practice.
• Manage and oversee complex aspects of cyber incident management including planning, reporting, and risk management.
• Analyse and interpret complex information to develop innovative solutions.
• Lead and manage critical projects in a high-volume, demanding environment.
• Engage and influence senior stakeholders and coordinate teams to resolve issues and achieve outcomes.

Skills

Incident response

Cyber forensics

SIEM

SOAR

EDR

IOC analysis

Scripting

Vulnerability management

Stakeholder engagement

Tools

SIEM

SOAR

EDR

Forensic tooling

Job description

Senior Cyber Security Incident Officer (Health Manager Level 3)

Lead cyber incident response and forensics that protect critical health services and patient data across NSW – with hybrid flexibility and meaningful statewide impact.

• Temporary Full Time Exempt up till 30 JUN 2027, with the expectation to renew for the duration of the program.
• Hybrid flexibility for work-life balance | Chatswood
• Attractive salary, from $137,525 + 12% Super + 17.5% annual leave loading

Applications Close: 11:59pm, 16 November 2026

Your work matters at eHealth NSW
As the digital centre of excellence for NSW Health, we design and deliver secure, scalable technology that supports patient care across the state, helping clinicians provide better healthcare, now and into the future.

Join eHealth NSW to create real-world impact, drive meaningful outcomes and support the health of millions every day. Learn more about us at eHealth NSW

eHealth NSW is leading the implementation of a multi-year Cyber Security Uplift program across NSW Health. This strategic initiative is designed to enhance cyber resilience across the state's health system. We are working with Local Health Districts, Pillars, and Agencies to improve how we detect and respond to risks and to make sure everyone follows consistent security standards. By investing in modern technologies, governance frameworks, and workforce capability, NSW Health is proactively addressing the evolving cyber threat landscape to safeguard critical health services and patient data.

About the Opportunity

As Senior Cyber Security Incident Officer at eHealth NSW, you will play a key role in coordinating and delivering cyber incident response and forensics to ensure the safe and secure implementation of ICT projects across NSW Health.

This role offers the opportunity to work on high impact cyber security initiatives, collaborating with technical teams and stakeholders to manage complex incidents and enhance the organisation’s security posture.

In this role, you will:

• Coordinate and deliver cyber incident response and forensics across NSW Health.
• Apply cyber security analytical tools, methods, and procedures in practice.
• Manage and oversee complex aspects of cyber incident management including planning, reporting, and risk management.
• Analyse and interpret complex information to develop innovative solutions.
• Lead and manage critical projects in a high-volume, demanding environment.
• Engage and influence senior stakeholders and coordinate teams to resolve issues and achieve outcomes.

View the position description here

About You

• Extensive cyber incident response experience in a large, complex environment, or equivalent ICT/security qualifications applied in practice
• Strong Essential Eight experience and contemporary cyber security frameworks
• Hands-on mastery of security tooling including SIEM, SOAR, EDR, forensics, log and network traffic analysis, IOCs, scripting and vulnerability management
• Proven leadership of complex cyber incidents, coordinating resources, managing risks and delivering clear reporting
• Excellent analytical and stakeholder engagement skills, influencing senior leaders and driving outcomes in high-pressure environments

What’s in it for You?

At eHealth NSW, our benefits are designed to provide you with the flexibility, growth and support when you need it.

For questions around the role or recruitment process, including adjustments, please contact our Talent Advisor or Hiring Manager,Brad and quote REQ706049.

• This recruitment may be used to establish a Talent Pool for similar roles (ongoing or temporary) that may arise over the next 18 months.
• To be eligible for this role you must have current Australian work rights (Australian citizen, permanent resident, New Zealand citizen with a current passport, or hold a valid visa with permission to work in Australia).
• For this role 'Exempt' is refers to a fixed term contract of more than 13 weeks.
• If you currently reside outside NSW, please indicate in your application whether you are willing to relocate if successful