74-2023 - El1 Assistant Directors - Cyber Assurance

The Data Standards Body (DSB) Branch is comprised of just over twenty staff who are geographically dispersed across the country. The legislative function of the DSB is to assist the Data Standards Chair (Chair), who makes and reviews the Data Standards for the world-leading Consumer Data Right (CDR) program. The Chair is both an autonomous decision-maker as a Ministerial Appointee, and an official of the Treasury. The CDR is primarily administered by three government agencies, including Treasury's Market Conduct and Digital Division (MCDD), which has two other branches also dedicated to the CDR. This role forms part of the DSB's Digital Trust Team, which reports to the Digital Trust Director.

There are currently two positions available within the Data Standards Body Branch, information regarding both roles including the skills and capabilities required is provided below.

**Assistant Director, Cyber Assurance**

The role is intended to co-ordinate and undertake cyber assurance activities with respect to the Data Standards development process. The CDR has undergone a start-up style build phase since its initiation 5 years ago, but is now entering an operate and uplift phase, both as part of its maturation as a program, but also in preparation for additional proposed functionality, such as Action Initiation, which may include payments. With support, but limited direction from the Digital Trust Director, and external Suppliers, the role will:

- Establish and maintain a fit-for-purpose Risk Management Framework (RMF) for the Chair, which builds upon and aligns with Treasury's RMF, and broader requirements, such as relevant Commonwealth policies and guidelines, i.e. cyber, security, risk, and fraud.
- Scope, initiate, manage, and deliver risk management uplift activities for the development processes, management, maintenance, and stewardship of technical documentation, instruments and artefacts that may be hundreds of pages long.
- Design, develop, endorse/recommend, and promote risk management and business process improvements.
- Write compelling, digestible, and accessible reports, and other written materials for the Chair, DSB, and CDR agencies with regards to risk management obligations, and effective control strategies.

**Assistant Director, Compliance**

The role is intended to co-ordinate and undertake compliance activities with respect to the Data Standards development process. The CDR has undergone a start-up style build-phase since its initiation 5 years ago, but is now entering an operate and uplift phase, both as part of its maturation as a program, but also in preparation for additional proposed functionality, such as Action Initiation, which may include payments. With support, but limited direction from Treasury's General Counsel Branch, and external legal services, the role will:

- Co-ordinate and interface with legal advisers in order to solve complex legal compliance situations, which may be unprecedented; including identifying their relevant compliance requirements, and control objectives.
- Scope, initiate, manage, and deliver compliance activities for technical documentation, instruments and artefacts that may be hundreds of pages long.
- Design, develop, endorse/recommend, and promote compliance and business process improvements.
- Write compelling, digestible and accessible reports, and other written materials for the Chair, DSB, and CDR agencies with regards to compliance obligations, and effective control strategies.

**Key capabilities**:

- Capacity for objective analysis and sound professional judgement in making complex decisions.
- Highly-developed written and oral communication skills and demonstrated ability to communicate information coherently and concisely to audiences with a range of backgrounds and cultures.
- Demonstrated ability to prepare and finalise comprehensive, well analysed and evidence-based documented written reasons for decisions in accordance with relevant legislation, national policies and procedures.
- Demonstrated ability to effectively manage interpersonal and communicate with internal and external stakeholders.
- Demonstrated skills in time management, prioritisation and working with competing priorities.
- High level analytical skills to accurately identify risk using appropriate decision tools for reporting/managing unacceptable risks.
- Ability to work independently, as part of a larger team, and within the broader departmental environment in accordance with the APS Values and Code of Conduct.
- Competent in a range of IT theory and concepts.