Senior Manager, Cyber Offensive

Transport for NSW; Sydney; Hybrid; AUD 180,000 - 250,000; Full time

Benefits offered by this job

Hybrid work arrangement

Flexible work options

Inclusion programs

Job summary

Transport for NSW seeks a senior cyber security leader to build and run an offensive security program. You will lead a team of specialists in penetration testing, threat-informed testing and adversary simulation, delivering safe, compliant testing aligned with enterprise security requirements.

You will manage external providers, translate technical findings into business risk insights for executives, and drive program maturity across governance, risk management and security assurance in a

Qualifications

• Experience leading offensive security programs and security testing in complex or regulated environments.
• Ability to translate technical findings into business risk considerations for executives and leadership.
• Proven track record managing external security providers and vendors with a focus on compliance and risk.

Responsibilities

• Lead and develop a high-performing cyber offensive capability, managing a team of specialists focused on penetration testing and cyber attack simulation.
• Drive the maturity of offensive security practices, including red teaming, adversary simulation, and tooling strategies.
• Manage external penetration testing providers and specialist security vendors, setting clear expectations and ensuring delivery meets contractual and compliance standards.
• Translate technical findings into meaningful business insights, presenting risks and recommendations to senior stakeholders; define KPIs to measure program effectiveness.
• Lead the planning and delivery of offensive security programs, aligning testing activities with business priorities across stakeholders.

Skills

Offensive security

Penetration testing

Threat-informed testing

Adversary simulation

Governance & risk

Vendor management

Executive briefing

Leadership

Job description

Organisation/Entity: Transport For NSW
Job category: Information & Communication Technology
Job location: Macquarie Park, NSW, AU, 2113
Job reference number: 108035
Employment type: Permanent Full-Time
Salary range: An attractive remuneration package

You’re open to a change of direction and a new challenge.

You bring structure, mitigation and education to our organisation. Our records and datasets are vast and varied. This is your opportunity to safeguard critical infrastructure, order and protect sensitive data, and defend against emerging cyber threats. You'll be part of an expert team who protect against thousands of threats every day.

In this role, you'll:

• Lead and develop a high-performing cyber offensive capability, managing a team of specialists focused on penetration testing and cyber attack simulation. You will provide both technical and people leadership, ensuring activities are delivered safely and in line with enterprise security requirements.
• Drive the maturity of offensive security practices, including red teaming, adversary simulation, and tooling strategies. You will continuously refine testing approaches, optimise tools, and strengthen the organisation's overall security posture while reducing cyber risk.
• Manage external penetration testing providers and specialist security vendors, setting clear expectations, monitoring service quality, and ensuring delivery meets contractual, compliance, and organisational standards. You will hold vendors accountable for quality outcomes, timeliness, and value while fostering strong security partnerships.
• Translate technical findings into meaningful business insights, presenting risks, impacts, and recommendations to senior stakeholders. You will define and track key metrics and KPIs to measure program effectiveness and support cyber maturity uplift.
• Lead the planning and delivery of offensive security programs, ensuring testing activities are effectively managed, communicated, and aligned with business priorities across a complex stakeholder environment.

About You

• You are an experienced cyber security leader with strong expertise in offensive security, penetration testing, threat-informed testing, and adversary simulation.
• You have a deep understanding of offensive security methodologies and can confidently challenge testing approaches, validate findings, and ensure assessments deliver meaningful risk outcomes.
• You have proven experience leading security teams and delivering penetration testing and security assurance programs within complex or regulated environments, supported by a strong understanding of governance, compliance, audit, and risk management requirements.
• You are experienced in managing external security providers and vendors, ensuring high-quality delivery, compliance obligations, and effective management of risk, commercial considerations, and business priorities.
• You can translate complex technical findings into clear, business-focused recommendations for executives and technology leaders, influencing decision-making and building trusted stakeholder relationships.
• You are a strong communicator and project leader, capable of managing competing priorities and delivering structured, high-impact offensive security programs.

This is a Hybrid role based in Macquarie Park, Sydney.

This is a Designated Security Assessed Position and requires Australian citizenship, along with the ability to obtain and maintain an NV1 Commonwealth Security Clearance.

Who We Are

Transport for NSW provides a safe, integrated, and efficient transport system. We connect people, communities and industry every day.

Join us

Our workforce is as diverse as the community we serve. If you’d like further information on our inclusion and diversity initiatives, visit Transport careers.

Flexible work options may be available.

Aboriginal people and people living with disability are supported throughout the recruitment process and at work, and we encourage you to apply. Visit Supporting Aboriginal People or Supporting People with Disability for more information or speak to your talent team member to arrange any adjustments to how you interact with us.

Job Segment: Risk Management, Web Design, Manager, Security Clearance, Cyber Security, Finance, Creative, Management, Government, Security