Deputy Chief Information Security Officer (Deputy CISO)
The University of New South Wales (UNSW Sydney) UNSW Kensington Campus, Sydney, NSW- Opening Date: 27-Sep-2024
- Closing Date: 10-Oct-2024
- UNSW Kensington Campus, Sydney, NSW
- Excellent salary package
- Collaborate with the CISO to define and execute the cyber security vision, strategy, and roadmap.
- Lead the development and implementation of the cyber security risk management framework.
- Lead the definition and implementation of a cyber security engagement, risk awareness and training program.
- Lead the coordination of cyber security objectives with related University delivery functions, including but not limited to: Technology service delivery functions; Legal and Privacy; Records Management; Procurement; Learning & Development; Data Management and Governance; Enterprise Risk Management; Research Infrastructure; International Engagement & National Security; Conduct & Integrity; Recruitment.
- Manage the day-to-day operations (including budgetary management, and financial approvals in line with delegation) of the following cyber security functions: strategy; governance; architecture; risk advisory; engagement and awareness; risk management; compliance; controls assurance and testing.
- Manage the cyber security governance arrangements associated with the University’s ISO/IEC 27001 certification.
- Manage the cyber security function’s risk and control measurement and reporting obligations.
- Oversee and develop relationships with external partners, vendors, and regulatory bodies.
- Manage the Cyber Security function’s participation in relevant audits, assessments, and compliance activities.
- Deputise for the CISO by agreement.
- Represent UNSW in industry forums to provide thought leadership across the sector.
- Align with and actively demonstrate the Code of Conduct and Values.
- Ensure hazards and risks psychosocial and physical are identified and controlled for tasks, projects, and activities that pose a health and safety risk within your area of responsibility.
- Bachelor’s degree in Cyber Security, Computer Science, Information Technology, or a related field with extensive experience in a senior cyber security leadership role.
- Significant experience in formulating and implementing cyber-security strategy in complex organisations.
- Significant experience in managing delivery of cyber security services in a complex organisation.
- Excellent written and verbal communication skills.
- Strong knowledge of cyber security, IT service management and technology architecture frameworks (e.g., NIST, ISO 27001, COBIT, ITIL, TOGAF).
- Strong analytical and problem-solving abilities, with a keen attention to detail.
- Strong interpersonal, communication and negotiation skills including ability to develop effective relationships and influence key stakeholders at all levels in the organisation.
- Demonstrated high level of personal motivation, resilience, and ability to work effectively individually or in teams.
- Detailed understanding of cyber security risks in the context of cloud security and emerging technologies.
- CISSP, CISM, or other relevant certifications.
- An understanding of and commitment to UNSW’s aims, objectives, and values in action, together with relevant policies and guidelines.
- Knowledge of health and safety responsibilities and commitment to attending relevant health and safety training.
- Flexible hybrid working
- Additional 3 days of leave over the Christmas Period
- Access to lifelong learning and career development
- Progressive HR practices
- Discounts and entitlements
- The University reserves the right not to proceed with any appointment.
Deputy CISO
Job no: 526627
Work type: full time
Location: Sydney, NSW
Categories: Information Technology, Cyber
Employment Type: full time continuing role as a Deputy Chief Information Security Officer (Deputy CISO)
Excellent salary package
Location: UNSW Kensington Campus (Hybrid Working Opportunities)
About UNSW:
UNSW isn’t like other places you’ve worked. Yes, we’re a large organisation with a diverse and talented community, a community doing extraordinary things. Together, we are driven to be thoughtful, practical, and purposeful in all we do. Taking this combined approach is what makes our work matter. If you want a career where you can thrive, be challenged and do meaningful work, you’re in the right place.
The Deputy CISO position has been created in response to the University’s evolving cyber security strategy and in particular the need for continuing engagement across the University’s diverse faculties and divisions, and to mature our cyber security governance, risk and compliance posture. The Deputy CISO supports the Chief Information Security Officer in University-wide engagement activities, overseeing risk management initiatives, and enhancing our governance framework. This role demands a strategic leader adept at navigating complex security challenges, promoting a culture of cyber resilience, and ensuring alignment with both academic and operational objectives. With a focus on fostering collaboration across departments and driving continuous improvement, the Deputy CISO will be instrumental in safeguarding the University’s data and technology assets while supporting our mission of academic excellence and innovation.
The Deputy Chief Information Security Officer (Deputy CISO) is a senior leadership role within the University’s Cyber Security team. The Deputy CISO assists the Chief Information Security Officer (CISO) in developing and implementing the overall cyber security strategy, policies, and procedures. This position plays a critical role in safeguarding the University’s information resources, ensuring compliance with regulations, and managing cyber security risks.
The Deputy CISO reports to the Chief Information Security Officer and has four direct reports.
Specific responsibilities for this role include:
- Collaborate with the CISO to define and execute the cyber security vision, strategy, and roadmap.
- Lead the development and implementation of the cyber security risk management framework.
- Lead the definition and implementation of a cyber security engagement, risk awareness and training program.
- Lead the coordination of cyber security objectives with related University delivery functions, including but not limited to: Technology service delivery functions; Legal and Privacy; Records Management; Procurement; Learning & Development; Data Management and Governance; Enterprise Risk Management; Research Infrastructure; International Engagement & National Security; Conduct & Integrity; Recruitment.
- Manage the day-to-day operations (including budgetary management, and financial approvals in line with delegation) of the following cyber security functions: strategy; governance; architecture; risk advisory; engagement and awareness; risk management; compliance; controls assurance and testing.
- Manage the cyber security governance arrangements associated with the University’s ISO/IEC 27001 certification.
- Manage the cyber security function’s risk and control measurement and reporting obligations.
- Oversee and develop relationships with external partners, vendors, and regulatory bodies.
- Manage the Cyber Security function’s participation in relevant audits, assessments, and compliance activities.
- Deputise for the CISO by agreement.
- Represent UNSW in industry forums to provide thought leadership across the sector.
- Align with and actively demonstrate the Code of Conduct and Values.
- Ensure hazards and risks psychosocial and physical are identified and controlled for tasks, projects, and activities that pose a health and safety risk within your area of responsibility.
Who you are:
- Bachelor’s degree in Cyber Security, Computer Science, Information Technology, or a related field with extensive experience in a senior cyber security leadership role.
- Significant experience in formulating and implementing cyber-security strategy in complex organisations.
- Significant experience in managing delivery of cyber security services in a complex organisation.
- Excellent written and verbal communication skills.
- Strong knowledge of cyber security, IT service management and technology architecture frameworks (e.g., NIST, ISO 27001, COBIT, ITIL, TOGAF).
- Strong analytical and problem-solving abilities, with a keen attention to detail.
- Strong interpersonal, communication and negotiation skills including ability to develop effective relationships and influence key stakeholders at all levels in the organisation.
- Demonstrated high level of personal motivation, resilience, and ability to work effectively individually or in teams.
- Detailed understanding of cyber security risks in the context of cloud security and emerging technologies.
- CISSP, CISM, or other relevant certifications.
- An understanding of and commitment to UNSW’s aims, objectives, and values in action, together with relevant policies and guidelines.
- Knowledge of health and safety responsibilities and commitment to attending relevant health and safety training.
To Apply:
If this is of interest to you, please submit your CV, Cover Letter and responses to the Skills and Experience outlined above and in the position description.
More Information:
Contact: Jen MacLachlan, email: j.maclachlan@unsw.edu.au
Applications close: Thursday 10th of October at 11.30pm.
Benefits and Culture:
- Flexible hybrid working
- Additional 3 days of leave over the Christmas Period
- Access to lifelong learning and career development
- Progressive HR practices
- Discounts and entitlements
UNSW is committed to equity diversity and inclusion. Applications from women, people of culturally and linguistically diverse backgrounds, those living with disabilities, members of the LGBTIQ+ community; and people of Aboriginal and Torres Strait Islander descent, are encouraged. UNSW provides workplace adjustments for people with disability, and access to flexible work options for eligible staff.
The University reserves the right not to proceed with any appointment.
Position Description
Advertised: 27 Sep 2024 AUS Eastern Standard Time
Applications close: 10 Oct 2024 AUS Eastern Daylight Time