Information and Communications Technology Security Manager

Background

The Australian Institute of Health and Welfare (AIHW) has five Groups: Information and Strategy; Business; Health and Functioning; Welfare and Housing; and Economics and Health Services.
The Information and Strategy Group is responsible for co-coordinating the AIHW's work on: informatics (including metadata, data standards and classifications); statistical methods and training; privacy and ethics; providing secretariat and other support services to national information committees in the health, community services and housing fields; and providing executive support to the AIHW Board, Director and Deputy Director.
The role of the Data and Information Technology Unit is to support and develop the Institute's computing and data management systems to meet its current and future needs and to provide staff with computing and data support services.

Duty Statement

Under general direction:

1. Coordinate overall implementation of ICT security activities comprising related physical security and including risk assessments and, security policies and procedures.
2. Manage internal building access control and information security backup, auditing and monitoring systems.
3. Liaise with security services suppliers and other organisations on relevant security issues, including monitoring of hardware and software security-related advice and assessments.
4. Undertake expert security threat and risk assessments, and collaborate with system developers and advise on risks associated with all Institute software, application and system development proposals, both onsite and offsite.
5. Advise on and implement change management procedures, and take responsibility for remedial action, including investigation, reporting on, management and resolution of information security incidents and problems, and identification and rectification of security threats in hardware and software systems.

Selection Criteria

1. Highly developed information and physical security related expertise.
2. Well developed analytical, planning and organisational skills.
3. A sound general knowledge and experience of hardware, software and security systems such as in use within the Institute, particularly operating and access control systems and associated auditing tools.
4. Ability to document systems and procedures to a high standard.
5. Highly developed liaison, communication and negotiation skills, including the ability to negotiate and communicate with staff at all levels within the Institute.
6. Demonstrated commitment to good employment and workplace relations practices, including Workplace Diversity and Occupational Health and Safety.
7. Relevant tertiary qualifications.

The successful applicant will be required to obtain a security clearance