Cyber Training And Awareness Officer

About us
The Queensland Fire Department (QFD) provides fire prevention, preparedness and response services to fire in the built and landscape environments, as well as scientific and specialist capabilities to Queensland communities. The QFD provides a multi-hazard emergency response, including road crash rescue, bushfire, hazardous material, technical and vertical rescue, severe weather incidents, remote and swiftwater rescue, and provides a number of functions supporting community safety outcomes.
The department encompasses Queensland Fire and Rescue (QFR), Rural Fire Service Queensland (RFSQ), as well as the broader department which work together to pre-empt, prevent, mitigate and manage the consequences of fires and other emergencies on Queensland communities and support our large volunteer membership across the state.
The QFD is an organisation that is focused on reframing the department's relationship with Aboriginal and Torres Strait Islander peoples, communities, and organisations through the Path to Treaty, Closing the Gap and building our cultural capability.
Purpose of role
Cyber and Information Security is responsible for managing the departments cybersecurity roadmap in conjunction with strategy and architecture team. The Cyber Planning and Policy Design team is responsible for information security, availability, confidentiality, privacy and integrity of the department's data while effectively managing cyber risks. The team is responsible for developing and reviewing policies, programs and guidelines, and promoting awareness of cyber policy and strategies across QFD.
Reporting to the Executive Manager, you will be responsible for contributing to the development and implementation of a comprehensive cybersecurity awareness program that educates and empowers employees at all levels. You will take a proactive approach to identify cyber threat training needs and delivering engaging content that enhances our organisation's security culture. You will play a critical role in developing and supporting staff cyber awareness campaigns, communications, and delivering training to ensure that QFD's cyber defence requirements are achieved and secured from current and emerging threats.
Key requirements
Highly desirable requirements
- Experience working within a cyber security environment, including providing security awareness communications in a large geographically dispersed organisation.
- Sound knowledge of introductory Information Security and/or Cyber Security principles and concepts, and/or an Information Security Certification or qualification preferred.

Your key accountabilities
Your part in the ongoing success of our department, in supporting frontline services will see you responsible for a variety of work, including, but not limited to:

- Deliver cyber phishing awareness simulation campaigns, including follow up activities such as analysis and reporting of trends, and modify campaigns based on emerging threats to support effective planning and informed decision-making.
- Provide administrative support and develop training materials, guides, and procedures to ensure end users have an understanding about cyber security best practice, and how to mitigate risk and protect against cyber phishing schemes, attacks and data breaches.
- Provide regular security awareness communications to staff and volunteers on a variety of cyber security topics, including any imminent or emerging threats to help assist in stopping human errors from causing data breaches.
- Deliver security awareness training and education programs to enhance security awareness and ensure employees understand their role in identifying cyber risk, including ways in preventing cyber attacks and protecting their systems and information.
- Analyse, document and track risks related to cyber safe behaviours and, update these risks on a regular basis in order to effectively change these behaviours, so our employees act in a secure manner, reducing the cyber risk to our organisation.
- Provide quality advice and guidance relating to information security issues, and the effectiveness of implemented controls, policies and processes, including appropriate remediation activities to ensure a positive compliance culture within the department.
- Build and maintain effective working relationships with internal and external stakeholders, and security industry specialists to promote sound information security practices, and assist in developing strategies and activities to support effective security awareness.
- Contribute to the review and implementation of a cyber security risk management framework that can effectively measure and evaluate cyber security awareness and cyber safe behaviours changes and continuous improvement.

Capabilities
To determine your suitability for the role, you will be assessed on the following Leadership Competencies for Queensland behavioural profiles that link to the "key accountabilities" for this role:
Leadership Competency