Cyber Security Assurance Manager

The Australian Electoral Commission (AEC) is an independent statutory authority established by the Australian Government to maintain an impartial and independent electoral system for eligible voters through active electoral roll management, efficient delivery of polling services, and targeted education and public awareness programs.

• The AEC's values and commitments

The AEC values and commitments are an essential component of our operating environment and frame how AEC staff work. The AEC's focus is on electoral integrity through the values of quality, agility and professionalism.

• The Team

The Electoral Integrity and Communications Branch has a primary function to ensure that the AEC is well-positioned to respond in a coordinated and consistent manner to any threats to electoral integrity, centred around cyber security, protective security, and disinformation.

The role of the Cyber Security & Assurance section within the EIC Branch is to provide the AEC with assurance that its business and electoral operations are adequately protected and monitored against cyber intrusion and interference. The section's cyber security responsibilities include providing cyber security advice and support to the AEC and to projects within the AEC. Assurance of the AEC's ICT environment and systems, while delivering operational (day-to-day) cyber security functions, including monitoring incident management, incident resolution, and conducting cyber-related investigations.

• The Opportunity

The Cyber Security Assurance Manager supports the ITSA and Deputy ITSA to manage cyber security related patching of AEC systems and compliance of AEC systems with mandated security controls. This role manages patching in a liaison capacity, providing related advice and direction to system administrators.

This is an exciting opportunity to make a significant contribution to the delivery of electoral events and day-to-day operations through the continuous improvement of AEC's systems.

This role also coordinates regular scanning and testing of the AEC IT environment, while reporting on compliance with mandated cyber security controls.

To excel you'll have :

• Demonstrated knowledge and experience in implementing policy and processes that align to the Australian Cyber Security (ACSC)'s Essential Eight (E8) and its Maturity Model.
• Demonstrated knowledge and experience in cyber security assurance, including assurance activities and reporting with respect to the ACSC E8.
• Sound knowledge and experience in successfully managing and delivering results within time restraints and with competing priorities.
• Strong written communication skills and demonstrated ability to communicate effectively with Senior Executive.
• Proven conceptual and analytical abilities with sound knowledge of change management practices and techniques to enable innovation, whilst achieving results within legislative and budget parameters.
• Demonstrated knowledge of Commonwealth frameworks, including the PSPF and ISM, with relevant qualifications in cyber security or similar.
• Eligibility
• AEC employees must be Australian citizens.
• Any person who is, and seen to be active in political affairs, and intends to publicly carry on this activity, may compromise the strict neutrality of the AEC and cannot be considered.
• Applicants are required to consent to, undergo, obtain and maintain a character clearance.
• Applicants are required to consent to, undergo, obtain and maintain the security clearance required for this role.
• Applicants may be required to undertake psychometric assessment.