- Executive Level 2
- Canberra, ACT
- $152,362 - $182,891

About The Department Of Employment And Workplace Relations We are committed to empowering futures, ensuring rights and enriching lives. We support people to have safe, secure and well-paid work with the skills for a sustainable future as we ourselves strive to be a model employer. We provide the framework for fair and productive relationships between employers and employees. We also oversee skills development and training initiatives to support those entering the workforce or re-training to take advantage of emerging employment opportunities.

With us, your work directly contributes to shaping the employment landscape. Whether you are engaging in policy development, program implementation, or direct support services, your efforts will have a tangible impact on job seekers, employees and the economy by giving them a framework to build a future anchored and realised through employment.

It is our ambition to do things differently, to create the ‘department of outstanding jobs’– where our people reflect our purpose.

The Role

Reporting to the Assistant Secretary of Cyber Security, we are looking for two Directors to join our dynamic cyber security branch - the Director of Cyber Governance &

Education and the Director of Cyber Assurance.

Director - Cyber Governance and Education (IT Security Advisor)

The Director of Cyber Governance and Education is unique position in which the Director is also the departmental IT Security Advisor (ITSA). The Director is responsible for providing day-to-day cyber security guidance, maintenance of departmental cyber security policies, and awareness campaigns.

Director - Cyber Assurance The Director of Cyber Assurance is responsible for the independent assessment of cyber security controls to ensure that they are operating effectively. The Director oversees a team of Governance-Risk-and-Compliance (GRC) specialists and supports the Authority to Operate process.

This position is available on an ongoing basis. Future positions may be offered on an ongoing or non-ongoing basis for up to 12 months initially.

Duties and Responsibilities

Responsibilities of the Director of Cyber Governance & Education include:

- Lead,



develop and support a multidisciplinary team to deliver high-quality cyber security advice and education services to the department and its client agencies.
- Act as the department’s principal operational adviser on information and ICT security.
- Provide authoritative interpretation of security policy and control requirements aligned to the Protective Security Policy Framework (PSPF), Information Security Manual (ISM), and relevant legislative requirements.
- Escalate non-compliant requirements, emerging risks and risks above the department’s acceptable threshold to the CISO or appropriate delegate.
- Monitor emerging technologies, threat landscapes, and government policy changes to inform strategic decision-making and appropriate risk management strategies.
- Embed cyber security requirements across the ICT lifecycle, including as part of the design, architecture, procurement, operation and decommissioning process.
- Provide authoritative advice to senior executives on cyber security, risk, and governance matters.
- Lead the preparation of ministerial, executive, audit, and governance committee briefs relating to cyber and information security risks.
- Drive a strong organisational security culture through awareness, training and education programs.

Responsibilities of the Director of Cyber Assurance include:

- Lead, develop and support a multidisciplinary team to deliver risk-based assessments and effective Authority to Operate outcomes for ICT systems.
- Oversee all supporting Authority to Operate activities including stakeholder engagement, coordination of supporting evidence, cyber security assessments including relevant treatments, and providing a recommendation to the authorising officer on whether the residual risk is acceptable.
- Provide both system-specific and strategic advice on cyber security risk and control effectiveness aligned with the Protective Security Policy Framework (PSPF), Information Security Manual (ISM), and relevant legislative requirements.




- Maintain a single authoritative register for all assessed systems, including the conditions under which they were authorised to operate.
- Oversee continuous monitoring to ensure systems operate within their authorised conditions, progress against recommended treatments and identify any significant architectural or security changes to the system which may require reassessment.
- Manage third-party and supply chain cyber assurance programs, including risks associated with Foreign Ownership Control and Influence.
- Drive risk-based assurance reporting for executives and governance committees.

How to Apply Applicants are required to provide a summary (no more than 750 words) that outlines skills, knowledge, and experience and why you should be considered for this vacancy. You should take into consideration the position overview (including any detailed position specific requirements) when drafting your response. Where possible include specific relevant examples of your work. The APS work level standards accommodate the diversity of roles across the APS and are structured to clearly differentiate between the work expected (i.e.

responsibilities and duties) at each classification level.

In the eRecruit (the department’s online recruitment system) you will also need to:

- upload a Curriculum Vitae
- provide contact details for 2 Referees.

Eligibility Don’t meet all the role requirements? At DEWR we are dedicated to building a diverse and inclusive workforce and seek to recruit staff with a wide range of backgrounds, skill levels, disciplines and working styles. If this role resonates with you and you are excited about making an impact, but your past experience doesn’t align perfectly, we encourage you to apply anyway. Citizenship - to be eligible for employment with the Department, you must be an Australian Citizen or, in limited circumstances, in the process of obtaining it.

Security Clearance - our successful candidate is required to hold, or have the ability to obtain, and maintain a Negative Vetting Level 1 security clearance.

Please refer to the Job Information Pack for more information about the role.

How to apply for jobs in the Australian Public Service (APSC Guide) Opens in new window

Job Information Pack Opens in new window

Job Information Pack Opens in new window

📌 Cyber Security Directors (Canberra)
🏢 Department of Employment and Workplace Relations
📍 Canberra