Manager, Information Security

Job Function: Information and Communications Technology- Date Posted: 30 Oct 2025- Job Requisition ID: 2488-
- Lead, review and develop protective data in line with Victorian Protective Data Security Framework
- A valued role within Emergency Communication Information Services at TZV
- Permanent full-time role based in Burwood, with travel across multiple sites-
- About Triple Zero Victoria- Triple Zero Victoria (TZV) provides the critical link between the Victorian community and the state’s emergency services agencies. It provides Victoria’s 24-hour emergency call-taking and dispatch services for Police, Fire, Ambulance and VICSES.- This integration of emergency services communications within Triple Zero Victoria is unique in Australia and rare worldwide. The team at Triple Zero Victoria are deeply committed to the community they serve and are among the most dedicated and highly skilled in their field.- About the Role-
- The Manager, Information Security is a key and active participant of the Emergency Communication Information Services (ECIS) Department.- The Technology Resilience team is a key and active participant of the ECIS led by the Senior Manager, Technology Resilience. The team sits within the Planning and Consequence Management Directorate, which is responsible for Enterprise Architecture, Business Enablement, Test & Release, Security Governance and Technology Resilience security (cyber) training, and awareness.- As the Manager, Information Security, you will be responsible to lead the review and/or develop new protective data security (and cyber) policy, procedures, facts sheets and guides along with intranet content to ensure alignment to the Victorian Protective Data Security Framework, Standards, legislations and/or controls.
- The role is key to the development, management and coordination of the Office of the Victoria Protective Data Security Framework, Standards and the Protective Data Security Plan and Agency Security Plan and reporting the attestation to the Office of the Victorian Information Commissioner. This includes conducting regular reviews to identify strengths, weaknesses and evaluate corporate protective security awareness, compliance and maturity.
- You will be responsible for the development, maintenance and delivery of protective security education and awareness, management, and oversight of protective security portfolio holders.- As part of the ECIS team you may be required to travel or transfer between your primary work location and other TZV sites to effectively perform your duties. Normal working hours are 38 hours per week between 7 am and 7 pm, Monday to Friday. You may be required to participate in an on-call roster and may be required to work reasonable overtime.- Day to day responsibilities include:

- Manage the delivery of the Cyber and Information Security Strategy to augment the ICT Strategy and subsequent Information Security Road Map.
- Lead the development, implementation and maintenance of a protective data security program of work reflecting TZV’s security environment aligned with the TZV security (and cyber) policies and procedures, the Victorian Protective Security Framework and Standards, Australian Government Protective Security Policy Framework and Information Security Manual and other standards where applicable.
- Prepare strategic advice for government statutory reporting requirements in particular the Office of the Victorian Information Commissioner pursuant to the Privacy and data Protection Act 2014.
- Prepare regular reports on cyber and information security risks, vulnerabilities, and incidents.
- Undertake complex research in relation to relevant compliance frameworks, legislation, and standards to ensure organisational compliance.-
- About You-
- The Manager, Information Security will be highly experienced in technology risk and resilience or have a Tertiary qualification in Information Communication Technology (ICT) or related field.-
- Demonstrated experience in the implementation of security (and cyber) frameworks, strategies and plans.
- Strong complex stakeholder engagement skills and proven ability to collaborate, negotiate and influence others to achieve outcomes.
- Demonstrated experience in leading and mitigating complex technology and security risks, security/cyber incidents and investigations and implementation of recommendations to strengthen compliance and ensure operational effectiveness.
- Demonstrated knowledge and understanding of information security policy, standards and guidelines, relevant to TZV, and their importance in effective and appropriate planning for services and the development of secure information management strategies.
- Demonstrated experience in developing, implementation of and evaluation of compliance and education and training awareness programs within protective security or similar program.-
- Executive and Senior Leadership are committed to empowering employees towards their professional and personal g