Assistant Director, Cyber Security and Assurance

Australian Electoral Commission – Canberra ACT

The Cyber Security and Assurance section is responsible for helping protect the AEC's systems, information and electoral processes from cyber security threats, operational disruptions and other risks that could impact the delivery of electoral events. The section works across the agency to strengthen security, support informed decision-making and enhance the resilience of critical electoral functions.

The section comprises three specialist teams:

Cyber Operations manages the AEC's Security Operations Centre and is responsible for the monitoring, detection and response to cyber security events and incidents. The team works closely with internal and external stakeholders to maintain situational awareness and support the security of AEC systems and services.

Governance, Risk and Compliance (GRC) provides cyber security governance, risk and assurance functions across the agency. The team develops policy and guidance, conducts security risk assessments, manages a range of security approvals and supports compliance with Australian Government security requirements.

Resilience focuses on strengthening the AEC's ability to prepare for, respond to and recover from disruptive events. The team examines the resilience of electoral processes, systems and supporting capabilities under a range of adverse and extreme threat scenarios, helping to ensure the continued delivery of trusted electoral outcomes.

The Cyber Security and Assurance section is responsible for helping protect the AEC's systems, information and electoral processes from cyber security threats, operational disruptions and other risks that could impact the delivery of electoral events. The section works across the agency to strengthen security, support informed decision-making and enhance the resilience of critical electoral functions.

The section comprises three specialist teams:

Cyber Operations manages the AEC's Security Operations Centre and is responsible for the monitoring, detection and response to cyber security events and incidents. The team works closely with internal and external stakeholders to maintain situational awareness and support the security of AEC systems and services.

Governance, Risk and Compliance (GRC) provides cyber security governance, risk and assurance functions across the agency. The team develops policy and guidance, conducts security risk assessments, manages a range of security approvals and supports compliance with Australian Government security requirements.

Resilience focuses on strengthening the AEC's ability to prepare for, respond to and recover from disruptive events. The team examines the resilience of electoral processes, systems and supporting capabilities under a range of adverse and extreme threat scenarios, helping to ensure the continued delivery of trusted electoral outcomes.





The key duties of the position include:

This is an exciting opportunity to join the AEC and contribute to work that has a direct impact on Australia's democratic processes.

The Assistant Director, Cyber Assurance supports the AEC's commitment to maintaining a strong cyber security posture and protecting the integrity, availability and resilience of election management systems and supporting corporate services.

The role leads the coordination and oversight of cyber assurance activities across the agency, ensuring that independent assessments, remediation activities and compliance obligations are monitored, reported and effectively integrated into operational planning and decision-making.

Working with a high degree of independence, the role provides trusted advice on cyber security assurance outcomes, coordinates strategic reporting and drives accountability for the timely implementation of recommendations arising from cyber assessments.

During electoral events, the role also supports election readiness activities by monitoring the section's delivery against key milestones, coordinating progress reporting and ensuring cyber security priorities remain aligned with the agency's Election Ready Roadmap.

To excel you’ll have:

We are seeking a motivated and capable professional who can demonstrate the skills, knowledge and experience required to perform successfully in this role.

- Demonstrated ability to manage and coordinate complex assurance, governance or compliance activities and deliver outcomes in a complex and changing environment.
- Demonstrated experience monitoring, analysing and reporting on organisational performance, risks, compliance obligations and assurance outcomes, including establishing oversight mechanisms to track remediation activities and support accountability for outcomes.
- Demonstrated experience in a dedicated cyber security role.
- Demonstrated ability to influence stakeholders, including senior executives, governance forums and external partners, on complex or sensitive issues.
- Demonstrated ability to identify emerging risks, assess complex issues and provide practical advice that supports organisational objectives and risk-based decision-making.
- Excellent written and verbal communication skills, including the ability to prepare clear advice, executive briefs, governance papers, reports and presentations for senior stakeholders.
- Robust organisational and planning skills,



including the ability to manage competing priorities, coordinate multiple workstreams and deliver outcomes within legislative, policy and budget parameters.
- Personal drive, integrity and sound judgement, including the ability to work with limited direction and exercise initiative in a complex operational environment.

Desirable

- Demonstrated experience coordinating cyber security assurance activities, including IRAP assessments, penetration testing, security reviews, audits or compliance assessments.
- Professional qualifications and/or certification in a cyber security discipline.
- Knowledge of, or the ability to quickly gain knowledge of, the Australian Government Information Security Manual (ISM), Protective Security Policy Framework (PSPF), Essential Eight and related cyber security frameworks.
- Experience managing remediation programs, tracking audit or assessment findings, and monitoring compliance against cyber security requirements.

Eligibility

- AEC employees must be Australian citizens.
- Any person who is, and seen to be active in political affairs, and intends to publicly carry on this activity, may compromise the strict neutrality of the AEC and cannot be considered.
- Applicants are required to consent to, undergo, obtain and maintain a character clearance.
- Applicants are required to consent to, undergo, obtain and maintain the security clearance required for this role.

Getting to know the Australian Electoral Commission

The Australian Electoral Commission (AEC) is at the heart of Australian democracy.The AEC is responsible for conducting federal elections and referendums, maintaining the Commonwealth electoral roll and making sure the Australian public is informed about all electoral matters. Our goal is to see that all eligible Australians actively participate in our democracy.The AEC values of electoral integrity through quality, agility and professionalism drive strategic and corporate planning and assist in organising the agency in a way that will effectively deliver the business into the future.The AEC is an equal opportunity employer which upholds the APS employment principles and actively encourages a diverse and inclusive workplace.The AEC’s statutory functions in relation to the conduct of elections and referendums require that the AEC and its employees must be, and must be seen to be, impartial and politically neutral. As a result, the AEC Enterprise Agreement and Political Neutrality Policy state that it is an inherent requirement of AEC employment that employees, and prospective employees, are not publicly active in any political affairs and do not publicly engage in such activities. This includes advocating any issues associated with a referendum. Should a prospective employee fail to meet this inherent requirement, they will be ineligible for employment with the AEC.

#J-18808-Ljbffr

📌 Assistant Director, Cyber Security and Assurance (Canberra)
🏢 Australian Electoral Commission
📍 Canberra