APS6 Cyber Security Officer in Canberra

The Australian Institute of Health & Welfare (AIHW) is committed to fostering an inclusive, flexible and high-performing organisation where people are treated with respect and courtesy, and where diversity is recognised, valued, and celebrated. We are proud to be ranked among the top ten APS agencies for employee engagement, enabling innovation and wellbeing.

We offer a range of benefits including:

• Access to flexible working arrangements to support your work/life balance
• Attractive remuneration packages including generous superannuation and leave provisions
• Challenging and fulfilling work where you can use your skills and expertise
• Opportunities for professional development

We welcome applications from First Nations people, people with disability, LGBTIQA+, neurodiverse people and people from diverse cultural and linguistic backgrounds. The AIHW has offices in Canberra and Sydney and offers remote work opportunities for many roles.

The key duties of the position include:

The ICT Group is responsible for strategic ICT capability and the delivery of ICT services at the AIHW. The Cyber Security & Assurance Unit ensures that ICT services enable AIHW to securely execute its mission protecting critical data and upholding trust. Our security remit spans the Australian Cyber Security Centre (ACSC) principles, including:

• Govern – Establishing robust security frameworks and policies
• Identify – Identify assets and associated security risks
• Protect – Implementing security controls and safeguards
• Detect – Monitoring for threats and responding proactively
• Respond and Recover – Coordinating incident management and resolution

The Cyber Security & Assurance Unit is looking for an experienced APS6 Cyber Security Officer who is responsible for supporting the development, implementation and continuous improvement of the AIHW’s cyber security governance, risk and compliance (GRC) activities, while also contributing to technical uplift initiatives across ICT environments. The role works both independently and as part of a multi-disciplinary cyber security team to ensure security risks are identified, assessed and managed in alignment with organisational objectives, relevant legislation, and the Protective Security Policy Framework (PSPF) and Australian Signals Directorate’s Information Security Manual (ISM).

Key responsibilities include conducting security risk assessments, supporting accreditation and assurance activities, IT security policy development, maintaining security documentation, and monitoring compliance with cyber security policies and control frameworks. The position also contributes technical expertise to assist with vulnerability management, incident response, security tooling configuration, and continuous monitoring activities. The APS6 Cyber Security Officer engages with internal stakeholders, project teams and external partners to provide security advice, translate policy requirements into practical controls, and support secure-by-design practices. The role requires strong analytical skills, sound judgement, and the ability to communicate complex security concepts in a clear and actionable manner.

Eligibility

To be eligible to apply for this vacancy, you must:

• Be an Australian citizen
• Undergo any required pre-employment checks, including a police records check
• Obtain and maintain a valid Security Clearance if required by the institute

A probationary period of six (6) months will apply to any new engagement to the APS. Candidates applying for APS vacancies should follow the principles for candidate use of AI in recruitment.