Assistant Director, Cyber Governance, Risk and Compliance

The role will be responsible for leading the development and implementation of cyber security policies, standards, and risk assessments, while providing expert advice to senior leadership. The role oversees a small team to ensure ICT systems are compliant with Australian Government requirements and cyber risks are effectively managed. Working closely with key stakeholders, the position drives robust security documentation, audit and reporting frameworks, and provides specialist guidance to technical teams, supporting secure system development as well as change and incident management.

Key responsibilities

Ensure a strategic and integrated approach to cyber-security risk management, with a focus on information management, staff development and risk‑based decision making.

Determine security requirements by:

- evaluating business strategies and requirements;
- researching global information security standards and emerging technologies;
- conducting system security reviews, vulnerability analyses and risk assessments;
- developing and complying with architecture/platform standards;
- identifying integration issues; and
- preparing cost estimates for relevant cyber security work.

Document and analyse risks using the Information Security Manual (ISM) control framework and provide certification documentation (SOA, SSP, SRMP) for accreditation by the Head of Cyber Security or Chief Information Officer (CIO).

Ensure the development and implementation of plans, policies, work instructions and standard operating procedures to ensure an enhanced level of security compliance within AFSA.





Maintain security by:

- monitoring and ensuring compliance to standards, policies, and procedures;
- supporting incident response and analyses;
- providing advice and ongoing education to staff on managing ICT risks and threats.

Lead and build a team by:

- establishing clear work expectations, systems and processes;
- encouraging and supporting ongoing learning and development opportunities;
- providing regular feedback;
- identifying opportunities to enhance team performance in an environment of collaboration, continuous improvement and change.

Enhance security team competence and undertakings by:

- mentoring team members and answering technical and procedural questions for less experienced team members; and
- developing, promoting and coaching staff on improved processes.

Prepare system security reports by collecting, analysing, and summarising data and trends.

Engage and manage contractors and consultants, as required, to contribute to delivery of secure services and projects.

Lead initiatives as a senior member of the Cyber Security Team and Technology Services Division within AFSA, including providing input to ICT strategies and operational plans and senior management discussions as required.

Qualifications and experience

Mandatory





- VET or Tertiary qualifications in information management, computer science, information systems or equivalent experience;
- Certified Information Security Manager (CISM), Certified information Systems Security Professional (CISSP) or equivalent certification;
- Demonstrated experience in risk management, policy and strategy development;
- Demonstrated capacity to provide timely, compelling and concise advice to inform executive members and senior management to support decision making.

Preferred

- Information Security Registered Assessors Program (IRAP);
- SANS specific security training;
- Demonstrated experience leading a team to achieve high performance and meet organisational and business goals;
- A modern, flexible working environment;
- Access to the Employee Assistance Program;
- Flexible working arrangements, including remote work options and variable start/finish times where appropriate.

We are committed to creating an inclusive workplace that values diversity. We welcome applications from First Nations peoples, people from culturally and linguistically diverse backgrounds, and people with disability. We support all employees to balance work, family, and personal commitments through flexible working options.

This role is open only to Australian citizens.

The successful candidate must either hold, or be willing to obtain, a security clearance at the Negative Vetting 1 level as a condition of employment. To satisfy character requirements all AFSA employees must undergo a police records check.

#J-18808-Ljbffr

📌 Assistant Director, Cyber Governance, Risk and Compliance (New South Wales)
🏢 Australian Financial Security Authority (AFSA)
📍 New South Wales