Chief Information Security Officer CSIRO CSIRO Canberra, Australian Capital Territory, Australia Location and office arrangements: All Capital Cities and major CSIRO sites across Australia considered. Role highlights: Leadership role reporting to the Chief Information Officer, driving the cyber security strategy for Australias national science agency. Influence at Board and Executive level across a complex, hightrust environment. Shape cyber resilience across worldclass research, national infrastructure and digital platforms. About CSIRO: As Australias national science agency, CSIRO works at the forefront of discovery to help solve the challenges that shape our nations future. From climate resilience and sustainable energy to food security, health, space and digital innovation, our science underpins Australias prosperity, security and wellbeing. The opportunity: We are seeking an experienced and pragmatic Chief Information Security Officer (CISO) to provide organisationwide leadership in cyber security. Reporting to the Chief Information Officer, the CISO will be a senior executive within the Information Management and Technology (IMT) Enterprise Unit and will play a central role in protecting CSIROs information, systems and assets. Your highlevel duties will include: Championing and fostering a cyberaware security culture across CSIRO. Leading and managing CSIROs cyber security strategy and program, integrated with the broader protective security framework. Establishing, maintaining and maturing the information security governance framework, including the cyber policy suite, in line with external regulatory and compliance requirements. Working collaboratively across the organisation and through governance committees to ensure consistent application of cyber security policies and controls across technology, projects, systems and services. Partnering with business and science stakeholders to manage cyber risk in alignment with the CSIRO Risk Management Framework. Supporting science activities by ensuring appropriate and proportionate cyber controls are applied. Monitoring the cyber threat landscape and overseeing cyber security incident response, including directing internal communications and performing a crisis management role for significant incidents. Reporting on cyber security risks, incidents and outcomes to the Senior Executive Team, the Board and, where required, external bodies. Role particulars: Salary: Attractive Salary package plus 15.4% super. Tenure & work schedule: 3year Specified Term, full time (Options for parttime, jobshare and flexible work arrangements can be discussed based on needs of role and individual circumstances). Eligibility: Applications are open to Australian citizens and all CSIRO indefinite and term employees who have been previously appointed through a competitive advertised process. Appointment to this role is subject to provision of a national police check and may be subject to other security/medical/character requirements. Security Clearance: The successful candidate will be required to obtain and maintain a security clearance at the Negative Vetting Level1. Reference No.: 102310. Essential Criteria: A relevant degree and/or equivalent senior executive experience, with demonstrated achievement in senior advisory and managerial roles in information management, governance and/or enterprise applications and solutions delivery. Extensive senior experience across a combination of risk management, information security and information technology roles. Knowledge of common information security management frameworks. Demonstrated leadership in information services, information policy and governance, and digital transformation. A history of establishing and leading highperforming teams, and a record of strong leadership that has contributed to or defined policy direction and strategy. Proven ability to foster effective relationships, using complex influencing strategies to ensure alignment between client or stakeholder needs and CSIROs objectives. Demonstrated ability to anticipate and successfully manage major conceptual technical, commercial or management problems, which have a significant impact at a Business Unit or Organisational level. Desirable: An appropriate information security credential such as CISM, CRISC or similar. Experience in delivering a cyber security strategy and roadmap for large and complex organisations. Setting you up for success: We are committed to providing a recruitment process that is fair, equitable and accessible to everyone. Please contact [email protected] to discuss adjustments that might make the process more equitable for your own circumstances. Life at CSIRO and flexible work arrangements: We work flexibly at CSIRO, offering a range of options for how, when and where you work. We can discuss flexible work arrangements with you during the recruitment process. CSIRO also offers a range of leave entitlements, benefits and career development opportunities. Our commitment to inclusion, safety and cultural respect: CSIRO is proud to be an equal employment opportunity employer and welcomes applications from people of all backgrounds and identities. We value the richness that comes from different cultures, experiences, identities and ways of thinking. We are committed to culturally safe workplaces, including for Aboriginal and Torres Strait Islander peoples. By fostering inclusion, belonging and safety, we strengthen innovation and ensure our work reflects the communities and Country we work with. CSIRO holds Platinum Status for the Australian Workplace Equality Index for LGBTQIA+ inclusion, and a Science in Australia Gender Equity Bronze Award. Child safety: CSIRO is committed to the safety and wellbeing of all children and young people involved in our activities and programmes. View our Child Safe Policy . How to apply: Please apply online and submit a cover letter (maximum 2 pages) and CV that demonstrate your motivation and ability to meet the essential requirements of this role. Applications close Sunday 8th February 2026, 11:00pm AEST/AEDT. #J-18808-Ljbffr
Job Title
Chief Information Security Officer