APS6 Cyber Security Officer

The ICT Group is the responsible for strategic ICT capability and the delivery of ICT services at the AIHW.

The Cyber Security & Assurance Unit ensures that ICT services enable AIHW to securely execute its mission 
protecting critical data and upholding trust. Our security remit spans the Australian Cyber Security Centre 
(ACSC) principles, including:

• Govern – Establishing robust security frameworks and policies
• Identify – Identify assets and associated security risks.
• Protect – Implementing security controls and safeguards
• Detect – Monitoring for threats and responding proactively
• Respond and Recover – Coordinating incident management and resolution.

The Cyber Security & Assurance Unit is looking for an experienced APS6 Cyber Security Officer is responsible for supporting the development, implementation and continuous improvement of the AIHW’s cyber security governance, risk and compliance (GRC) activities, while also contributing to technical uplift initiatives across ICT environments. The role works both independently and as part of a multi-disciplinary cyber security team to ensure security risks are identified, assessed and managed in alignment with organisational objectives, relevant legislation, and the Protective Security Policy Framework (PSPF) and Australian Signals Directorate’s Information Security Manual (ISM).

Key responsibilities include conducting security risk assessments, supporting accreditation and assurance activities, IT security policy development, maintaining security documentation, and monitoring compliance with cyber security policies and control frameworks. The position also contributes technical expertise to assist with vulnerability management, incident response, security tooling configuration, and continuous monitoring activities.

The APS6 Cyber Security Officer engages with internal stakeholders, project teams and external partners to provide security advice, translate policy requirements into practical controls, and support secure-by-design practices. The role requires strong analytical skills, sound judgement, and the ability to communicate complex security concepts in a clear and actionable manner.