Cyber Resilience Team Lead, CSIRO

CSIRO

Location:
Australia, Canberra ▼
Adelaide
Melbourne
Sydney
Brisbane
Hobart

Category:
IT - Administration

Contract Type:
Employment contract

Salary:

131113.00 - 153639.00 AUD / Year

Save Job

Apply Position

Job Description:

CSIRO is seeking an experienced leader to manage its Cyber Security Resilience team. This team plays a vital role in ensuring that CSIRO’s services are secure-by-design and aligned with acceptable risk levels. Working across the entire organisation and a range of strategic projects, the team delivers cyber security engineering and assurance artefacts, identifies risks, and provides recommendations to support informed decision-making.

Job Responsibility:

Maintain and establish collaborative and productive relationships with CSIRO operational and research stakeholders to maintain secure delivery of business goals within CSIRO organisational risk appetite
Maintain and establish collaborative and productive relationships with project stakeholders to enable secure delivery of business goals within CSIRO organisational risk appetite
Take ownership of technical assurance capabilities such as vulnerability management, penetration testing with a view to optimise and mature these capabilities
Lead CSIRO’s supplier cyber risk assurance capabilities to ensure CSIRO suppliers and third-parties risks remain within acceptable levels
Take ownership of cyber awareness capabilities of the organisation by developing and implementing a longitudinal, multi-faceted cyber awareness program
Be responsible for running and improving CSIRO’s cyber architecture capabilities
Review and approve cyber security resilience activity artefacts produced by the team prior to release and escalate any significant risks to the Chief Information Security Officer in partnership with key stakeholders
Manage cyber security related tickets/requests and reporting, budget planning and forecasting, and delivery of security engineering and assurance activities

Requirements:

Tertiary and/or industry qualifications in cyber security, IT or equivalent discipline
At least two (2) years managing a cyber security team in an operational or assurance capacity, or at least five (5) years managing an IT team
Demonstrated experience with leading the design, engineering and architecture of cyber security controls and application of cyber security assurance capabilities or resources
Demonstrated experience in the application of cyber security and/or information security principles, and best practices
Demonstrated experience in identifying, evaluating, and mitigating risks within an Enterprise environment
Demonstrated experience in managing a technology service/ area or technically leading/designing an enterprise solution
Demonstrated knowledge of enterprise and solution architecture, business analysis and requirements development, vulnerability scanning, penetration testing, threat/risk/gap assessments, compliance audits, and code analysis
Proven track record of effective ticket or request management providing advice to end users and stakeholders as well as issue/problem resolution
Demonstrated ability to communicate, collaborate and work effectively across organisational boundaries and levels with initiative and autonomy
Demonstrated ability to coordinate and manage competing priorities including engagement across multiple IMT strategic projects, day to day operational service delivery, reporting, capacity management, budget management, team management, and project management
Demonstrated ability and willingness to contribute novel ideas and approaches in support of scientific research and keeping the organisation cyber safe

Nice to have:

Experience in supporting multiple complex projects
Experience with the Protective Security Policy Framework (PSPF)
Experience with Australian Cyber Security Centre (ACSC) security guidance, NIST SP guidelines, and Centre of Internet Security (CIS) benchmarks
Good understanding of shared responsibility model in the cloud and/or on-premises
Familiarity with Australian legislation including (but not limited to) the Privacy Act 1988 (Cth) and the Archives Act 1983 (Cth)
Relevant security industry certifications from certification bodies such as ISACA, ISC2, SANS, PECB, SABSA Institute, The Open Group etc.

What we offer:

up to 15.4% superannuation
Flexible working arrangements
Diversity and inclusion initiatives

Additional Information:

Job Posted:
June 27, 2025

Expiration:
July 13, 2025

Employment Type:

Fulltime

Work Type:

On-site work

View All Jobs In This Company

Job Link Share:

Cyber Resilience Team Lead