Chief Information Security Officer

About the Role 

Reporting to the Chief Information Officer Shared Services & Digital Platforms the Chief Information Officer (CISO) provides Strategic leadership for cyber security across the DGS, ensuring the department’s information, technology assets and digital services are protected against evolving cyber threats. The role is accountable for developing and implementing the department’s cyber security strategy, governance and operating model, embedding security into enterprise decision-making, digital transformation and technology delivery to support the secure, resilient and trusted delivery of government services.

As a member of the department’s senior leadership team, the CISO provides authoritative advice to the Secretary, Deputy Secretaries and executive leaders on cyber security risk, resilience and compliance. The role leads enterprise cyber security operations, incident management and organisational capability, while fostering strategic partnerships across government and industry to strengthen security outcomes, drive continuous improvement and support the department’s strategic objectives.

Key Accountabilities:

• Develop, implement and continuously evolve the Department of Government Services’ cyber security strategy, operating model and strategic roadmap, ensuring cyber security is embedded across business planning, digital transformation, technology investment and service delivery. Provide strategic leadership to strengthen the department’s cyber resilience, maturity and ability to respond to emerging threats. 

• Lead the department’s enterprise cyber security governance framework, ensuring effective oversight of cyber risk, information security, privacy and technology resilience. Provide authoritative advice to the Secretary, Deputy Secretaries and executive leadership on security risks, compliance obligations and organisational risk appetite, ensuring alignment with Victorian Government legislation, standards and whole-of-government policies. 

• Provide executive leadership and oversight of the department’s cyber security operations, including security monitoring, threat intelligence, vulnerability management, identity security and incident response. 

• Provide strategic direction to ensure cyber security is embedded into enterprise architecture, technology delivery, digital products, cloud services and major transformation initiatives. 

• Represent the department in senior interdepartmental forums and contribute to whole-of-government initiatives that enhance cyber resilience and information security capability. 

• Create and lead a high-performing, multidisciplinary cyber security function that delivers strategic outcomes aligned to the department’s objective 

About You

We are seeking applicants who have demonstrated experience from the following criteria:

• Demonstrated experience leading enterprise-wide cyber security strategy, governance and transformation within a large, complex organisation. Proven ability to develop long-term strategic direction, embed security into organisational planning and enable the secure delivery of business and digital outcomes. 

• Demonstrated ability to provide authoritative advice to senior executives on cyber security, information security and organisational risk. Proven experience establishing governance frameworks, influencing executive decision-making and managing enterprise cyber risk in alignment with legislative, regulatory and government requirement 

• Proven experience leading cyber security operations and directing the response to significant cyber security incidents. Proven ability to build organisational resilience, strengthen operational capability and lead business continuity and recovery activities within a complex operating environment 

• Highly developed leadership and relationship management skills, with a demonstrated ability to lead multidisciplinary teams, build organisational capability and establish productive partnerships across government, industry and other key stakeholders to deliver strategic outcomes. 

• Demonstrated digital literacy with a strong understanding of contemporary cyber security practices, emerging technologies, artificial intelligence (AI) and automation. Proven ability to assess opportunities and risks associated with new technologies and leverage innovation to enhance cyber resilience, improve operational effectiveness and support secure digital transformation. 

Must be eligible to obtain and maintain a Negative Vetting Level 1 (NV1) Australian Government Security Clearance. 

For more information, please see the Position Description.

How to apply  

Apply before the advertised closing date 11:59pm on 30/08/2026. All applications should include:   

• a resume; and
• a cover letter which addresses the key selection criteria (within three pages). 

Other relevant information 

To be eligible for appointment to this role, applicants will possess corresponding work rights for the advertised employment period. Appointment to an ongoing role is only available to an Australian/New Zealand citizen or an Australian Permanent Resident.  Preferred applicants will be required to undertake pre-employment screening. DGS actively promotes diversity, inclusion and an equal opportunity workplace. We welcome applicants from all diverse backgrounds, including people with disabilities and Aboriginal and Torres Strait Islander peoples. All roles at DGS can be worked flexibly, however it may differ from role to role.