IT Security Manager

Canberra, ACT (The agency supports and promotes flexible working, including remote options on negotiation)
- Ongoing/Non Ongoing (Non-ongoing will be offered for 12 months)
- $121,724 - $138,463 + Superannuation

**About the Branch**:
**About the Section**:
The Products and Services section is dedicated to ensuring the seamless delivery and continuous improvement of the organization’s technological offerings. This section plays a pivotal role in driving innovation, enhancing user experience, and maintaining the operational excellence of IT services. Key functions include:

- ** Technology Operations**: Overseeing the daily operations of IT systems to ensure they run smoothly and efficiently, providing reliable and high-quality service delivery. We prioritise customer needs and feedback to continually enhance our operational processes.
- ** Strategic Alignment**: Collaborating with senior leadership to develop and implement IT strategies that support the organisation’s goals and objectives. Our strategies are informed by customer insights and are designed to meet evolving user expectations.
- ** Product Development**: Leading the development and enhancement of IT products and services, ensuring they meet the evolving needs of users and stakeholders. We embrace customer feedback to drive innovation and improve user satisfaction.
- ** Cybersecurity Management**: Implementing robust cybersecurity measures to protect the organisation’s information assets and ensure compliance with regulatory standards. We continuously refine our security practices based on user feedback and emerging threats.
- ** Project Management**: Managing IT projects from inception to completion, ensuring they are delivered on time, within budget, and to the required quality standards. We incorporate customer feedback throughout the project lifecycle to ensure our solutions meet their needs.
- ** Stakeholder Engagement**: Engaging with internal and external stakeholders to understand their needs, gather feedback, and ensure effective communication and collaboration. We foster strong relationships with our stakeholders to continuously improve our services.
- ** Risk Management**: Identifying and mitigating potential risks to ensure the resilience and security of IT operations. We proactively address risks based on customer feedback and industry best practices.

This section is integral to the organisation’s success, providing the technological backbone that supports all other functions and drives forward-looking initiatives while maintaining a strong focus on customer satisfaction and continuous improvement.

**Role Responsibilities and Duties**:
The IT Security Manager is responsible for providing leadership and supervision within their technical domain. Working closely with the Agency Security Advisor and the IT Security Advisor, the IT Security Manager will operationalise the policies and procedures as defined by Information Security Management System, and the Security Documentation Framework. The Manager is expected to facilitate compliance with the Essential 8 (E8), the Information Security Manual (ISM), and parts of the Protective Security Policy Framework (PSPF).

Under broad direction, the IT Security Manager will:

- Manage and implement cultural and procedural changes with a customer focus to promote the relevance and value of IT security.
- Lead the agency's compliance with cyber security policy, standards, regulations, and legislation.
- Ensure IT security toolsets are optimised to provide return on investment across their lifecycle and deliver outcomes as per agreements.
- Help system owners understand and respond to reported audit failures.
- Monitor information security systems and respond to any cyber security incidents.
- Oversee reporting on cyber security incidents and other areas of particular concern.
- Act as the Subject Matter Expert, providing strategic guidance and making informed decisions to ensure the agency's cyber security posture is robust and compliant.
- Lead and develop a high-performing team by setting clear objectives, providing guidance and support, fostering collaboration, monitoring performance, managing resources, and resolving conflicts to ensure the team achieves its goals and contributes to the agency's success.

**Qualifications/Experience**:

- Extensive experience with IT security
- Proven experience in managing teams
- Proficient in using vulnerability management toolsets
- Experience with Security Incident and Event Management toolsets

The following are desirable:

- Relevant industry or tertiary qualification in IT security
- Proficient in operating Microsoft Sentinel
- Practical experience implementing Australian Government security policies (e.g., E8, ISM, PSPF)

**Applications close 11.30pm on Sunday, 25 May 2025