Head of Cybersecurity

The Head of Cybersecurity plays a critical role in ensuring the security and integrity of Monash Health's information and technology assets. This position is responsible for establishing and maintaining an effective security governance framework, ensuring compliance with relevant regulations, and developing and implementing security policies that align with Monash Health's overarching enterprise risk management and policy settings.

• Develop and implement a comprehensive cybersecurity roadmap aligned with business objectives.
• Identify, review, assess, and mitigate cybersecurity risks across the organisation.
• Develop and lead the adoption of a robust cyber incident response management plan in response to cybersecurity incidents.
• Establish and enforce cybersecurity policies, standards, and procedures.
• Manage and mentor a cybersecurity team, fostering a security awareness culture.
• Ensure compliance with relevant government regulations and standards.
• Contribute and support reporting requirements to the Digital Health Governance Council, Emergency Management and Business Continuity Committee, and the Board Audit Committee.
• Collaborate with the Information Technology team in the design and implementation of secure IT infrastructure and systems.
• Have a strong working relationship with external security vendors and service providers.
• Work with appropriate communication and training teams to source and develop cybersecurity training programs for both employees and technological subject matter experts.

The ideal candidate for the Head of Cybersecurity role at Monash Health will hold significant experience in information security, IT operations, and cyber risk in a complex and distributed IT operating environment. The candidate should have proven experience in developing and maintaining sound relationships with internal and external teams and in-depth knowledge of cybersecurity principles and best practices.

• Tertiary qualifications in Information Technology or a related discipline.
• Professional security certification, preferably CISSP or CISM.
• ITIL v3/v4 certified with working knowledge of the associated incident, change, and problem management techniques.
• Strong knowledge of cybersecurity frameworks and best practices.
• Technical background with broad exposure to multiple technologies.
• In-depth understanding of network security, encryption, and incident response.
• Strong leadership, team building, and change management skills.
• Excellent interpersonal, written, and verbal communication abilities.
• Experienced in managing Managed Services outsourcing arrangements.