Senior Manager, Cyber Offensive

Transport For Nsw; Sydney; Hybrid; AUD 180,000 - 280,000; Full time

Job summary

Transport for NSW in Sydney seeks a seasoned cyber security leader to head offensive security and drive red team, adversary simulation, and threat-informed testing across complex environments.

You will lead a team of specialists, manage external providers, translate technical findings into business risk insights for executives, and align testing with regulatory and enterprise security requirements while delivering measurable improvements to cyber maturity.

Qualifications

• Experience leading offensive security programs and teams.
• Proven ability to translate technical risk into business impact.
• Strong governance, compliance, audit and risk management understanding.

Responsibilities

• Lead and develop a high-performing cyber offensive capability and team.
• Drive maturity of offensive security practices including red teaming.
• Manage external penetration testing providers and vendors.
• Translate findings into business insights for senior stakeholders.
• Plan and deliver offensive security programs aligned with priorities.

Skills

Offensive security

Penetration testing

Threat-informed testing

Adversary simulation

Security leadership

Stakeholder communication

Job description

Organisation/Entity: Transport For NSW

Job category: Information & Communication Technology

Job location: Macquarie Park, NSW, AU, 2113

Job reference number: 108035

Employment type: Permanent Full-Time

Salary range: An attractive remuneration package

You bring structure, mitigation and education to our organisation. Our records and datasets are vast and varied. This is your opportunity to safeguard critical infrastructure, order and protect sensitive data, and defend against emerging cyber threats. You'll be part of an expert team who protect against thousands of threats every day.

In this role, you'll:

• Lead and develop a high-performing cyber offensive capability, managing a team of specialists focused on penetration testing and cyber attack simulation. You will provide both technical and people leadership, ensuring activities are delivered safely and in line with enterprise security requirements.
• Drive the maturity of offensive security practices, including red teaming, adversary simulation, and tooling strategies. You will continuously refine testing approaches, optimise tools, and strengthen the organisation's overall security posture while reducing cyber risk.
• Manage external penetration testing providers and specialist security vendors, setting clear expectations, monitoring service quality, and ensuring delivery meets contractual, compliance, and organisational standards. You will hold vendors accountable for quality outcomes, timeliness, and value while fostering strong security partnerships.
• Translate technical findings into meaningful business insights, presenting risks, impacts, and recommendations to senior stakeholders. You will define and track key metrics and KPIs to measure program effectiveness and support cyber maturity uplift.
• Lead the planning and delivery of offensive security programs, ensuring testing activities are effectively managed, communicated, and aligned with business priorities across a complex stakeholder environment.

About You

• You are an experienced cyber security leader with strong expertise in offensive security, penetration testing, threat-informed testing, and adversary simulation.
• You have a deep understanding of offensive security methodologies and can confidently challenge testing approaches, validate findings, and ensure assessments deliver meaningful risk outcomes.
• You have proven experience leading security teams and delivering penetration testing and security assurance programs within complex or regulated environments, supported by a strong understanding of governance, compliance, audit, and risk management requirements.
• You are experienced in managing external security providers and vendors, ensuring high-quality delivery, compliance obligations, and effective management of risk, commercial considerations, and business priorities.
• You can translate complex technical findings into clear, business-focused recommendations for executives and technology leaders, influencing decision-making and building trusted stakeholder relationships.
• You are a strong communicator and project leader, capable of managing competing priorities and delivering structured, high-impact offensive security programs.

This is a Hybrid role based in Macquarie Park, Sydney.

This is a Designated Security Assessed Position and requires Australian citizenship, along with the ability to obtain and maintain an NV1 Commonwealth Security Clearance.

Who We Are

Transport for NSW provides a safe, integrated, and efficient transport system. We connect people, communities and industry every day.

Our workforce is as diverse as the community we serve. If you'd like further information on our inclusion and diversity initiatives, visit Transport careers.

Flexible work options may be available.

Aboriginal people and people living with disability are supported throughout the recruitment process and at work, and we encourage you to apply. Visit Supporting Aboriginal People or Supporting People with Disability for more information or speak to your talent team member to arrange any adjustments to how you interact with us.