Cyber Security and Identity Manager

About this role

We are seeking an experienced information security manager to lead cyber security, and identity and access management functions across the Australian Charities and Not-for-profits Commission’s (ACNC) digital services environment.

The Cyber Security and Identity Manager is responsible for establishing and maintaining trust in ACNC systems, data and digital services by ensuring appropriate security, identity and assurance controls are designed, implemented and operating effectively. It plays a critical role in ensuring the right people have the right access at the right time, supporting ACNC systems that are secure, auditable, and trusted by staff, charities and the broader community.

You will provide strategic leadership of identify and access management, digital trust controls, cyber security assurance and related governance activities. You will oversee workforce identify, public identity supporting the Charity Register and Portal, and partner/API trust arrangements, ensuring risks are effectively managed and controls remain aligned with ACNC requirements.

Leading a small team, you will coordinate business-hours security monitoring and incident triaging. You will oversee trust-impacting changes delivered by internal and external parties, provide expert advice on complex security matters, and act as the primary escalation and coordination point for digital trust and security issues.

This role may be offered on an ongoing or non-ongoing basis in Melbourne CBD. If you are found suitable but do not receive a job offer, we’ll add you to a list of people we can contact about similar jobs that become available. This is called a merit pool.

We encourage Aboriginal and Torres Strait Islander peoples, culturally and linguistically diverse people and people with disability to apply.

About cyber security & digital forensics roles for ex-police

Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.