Director - Cyber and Information Security

About the Role and Organization

As Director of Cyber and Information Security, reporting directly to the Executive Director, Information and Technology, you will steer and oversee all branch functions including human resources, financial and budget management, strategic planning, program execution, and reporting for the Queensland Fire Department (QFD). QFD offers comprehensive fire prevention, emergency response (including specialized rescues and hazardous materials management), and community safety services across Queensland with a strong commitment to collaboration among Queensland Fire and Rescue, Rural Fire Service Queensland, and support for the department's extensive volunteer network.

The department is focused on enhancing its relationship with Aboriginal and Torres Strait Islander peoples via its Reframing the Relationship Plan, supporting Closing the Gap initiatives, and developing cultural capability.

Purpose and Responsibilities

This role leads the cyber and information security strategy by managing the agency’s information security roadmap, mitigating risks, ensuring compliance with cyber security, information availability, privacy requirements, and infrastructure operations while enabling business objectives.

Key responsibilities include:

• Lead development and execution of the Cyber Security Framework and Roadmap aligning with business strategies and ensuring compliance with cyber security standards.
• Provide executive level strategic guidance on cyber and information security risks to facilitate continuous improvements and informed decision-making.
• Advocate the department's cyber security approach among senior leadership, vendors, and other stakeholders to uphold confidentiality, integrity, availability, privacy, safety, and recovery of information assets.
• Direct and coordinate ongoing threat assessments and implement risk treatment plans to manage information security incidents and safeguard IT assets, intellectual property, regulated data, and the department’s reputation.
• Develop initiatives to reduce technology risks and enforce adherence to Queensland Government policies and regulations.
• Assess current and prospective technology solutions to evaluate implications on cyber and information security, enhancing the department’s security posture.
• Create and maintain information security metrics and KPIs to foster a security-conscious culture among staff and vendors.
• Oversee human, financial, and physical resources, cultivating a culture of accountability, fairness, skill development, and performance excellence within teams.

Candidate Requirements

• At least 5 years of leadership experience focused on risk management, information security, ICT security, especially within cloud native environments.
• Minimum of 4 years managing and supporting information security in medium to large IT settings across diverse technologies and applications.
• Over 2 years leading information security capability planning.
• Strong understanding of various architecture and service deployment models alongside operational and security frameworks.
• Preferred certifications include Certified Information Security Manager (CISM) or Certified Information Systems Security Professional (CISSP).

Leadership and Personal Competencies

• Strategic leadership with the capacity to guide change in complex settings.
• Proven ability to develop lasting relationships and drive accountability for results.
• Commitment to fostering healthy, inclusive workplaces and exemplary governance.
• Alignment with QFD core values: Respect, Integrity, Trust, Courage, and Loyalty.