Cyber Security Engineer

About Us At WA Primary Health Alliance (WAPHA), we are dedicated to transforming and sustaining primary health care across Western Australia. As one of the 31 Primary Health Networks (PHNs) in Australia, we proudly manage three PHNs, guided by our 2023 - 2026 Strategic Plan. Since our establishment in 2015, we've been committed to strengthening primary care through innovative partnerships and a 'one health system' approach, ensuring better access to services and improved health outcomes. Our work focuses on: Supporting general practices to deliver top-quality patient care. Funding local primary health services tailored to community needs. Connecting local services to simplify the health care system. Leading system-wide reform for long-term impact. As an organisation that thrives in a dynamic environment, we embrace change and seek team members who are adaptable and flexible in their approach. We are proud to be an inclusive organisation, welcoming applicants from all backgrounds, including Aboriginal and Torres Strait Islander peoples, LGBTIQA plus individuals, people from diverse cultures, and people living with disabilities. Find out more about our values, workplace, and culture here . About The role As our Cyber Security Engineer , you will play a critical role in protecting and strengthening WAPHA’s digital environment. Reporting to the Systems Engineering Lead , you will lead the ongoing management and improvement of our cyber security, network security and cloud security capabilities, while ensuring compliance with ISO 27001 standards. Working across a modern technology landscape, you'll be responsible for monitoring threats, managing security technologies, maintaining the Information Security Management System (ISMS), and driving continuous improvement initiatives that enhance the security and resilience of our organisation. 🔹Employment Type: Full-time Maximum term contract for 12 months 🔹 Location: WAPHA Head Office, Level 2, 1 Hood Street, Subiaco (Hybrid role) 🔹 Salary: Band 5 ($114k - $128k Plus 12% Superannuation) Key tasks and responsibilities: Monitor, manage and improve WAPHA's cyber security, cloud security and network security environments. Administer and maintain security technologies including Palo Alto, Aruba, Cisco, Microsoft Azure, Microsoft Purview, Tenable and endpoint protection platforms. Monitor vulnerabilities, investigate security threats and coordinate incident response activities. Maintain and continuously improve WAPHA's Information Security Management System (ISMS) in line with ISO 27001 requirements. Develop, review and maintain security policies, procedures, risk registers and security documentation. Lead cyber security initiatives including penetration testing, security reviews, remediation activities and compliance audits. Implement and manage Data Loss Prevention (DLP) controls and information protection measures. Work closely with managed service providers, technology vendors and internal stakeholders to enhance security outcomes. Deliver cyber security awareness initiatives, training programs and phishing simulations across the organisation. Provide regular cyber security reporting, insights and recommendations to executive leadership and Board stakeholders. Contribute to continuous improvement projects that strengthen organisational security, resilience and business continuity. Maintain accurate, auditable documentation and support compliance with relevant security frameworks and standards. About you To be considered for this role, candidates must meet the following selection criteria: Essential experience and education Relevant tertiary qualification or industry certification in Cyber Security, Information Technology or a related field. Experience in cyber security, cloud security and network security administration within a complex technology environment. Experience working with security frameworks and compliance standards such as ISO 27001, Essential Eight and/or NIST. Hands-on experience with vulnerability management, threat monitoring and security incident response. Experience administering Microsoft Azure, endpoint protection and enterprise security platforms. Strong analytical, troubleshooting and problem-solving skills, with the ability to communicate technical concepts to a range of stakeholders. Highly regarded: Industry certifications in cyber security, cloud security or information security management. Experience with Palo Alto, Aruba, Cisco, Fortinet or similar technologies. Exposure to health, government or highly regulated environments. What we offer Hybrid working arrangement that combines remote work from home with office presence in our modern Subiaco office. Commitment to employee development. Salary packaging - WAPHA's arrangement allows for a maximum of $15,900 for general living expenses and $2,650 for entertainment benefits per fringe benefit tax year. Professional development opportunities. Employee Assistance Program. Additional paid parental leave. Gifted paid day off during Christmas shut down period. Annual $200 health and wellbeing reimbursement scheme. All employees have access to LinkedIn Learning. Study leave options available. Option to purchase additional leave. 13 weeks long service leave after 10 years of continuous services (accessible on a pro-rata basis after 7 years). To Apply Please submit your application by clicking the ‘Apply’ button. Your application should include your CV. As part of our recruitment process, you will be invited to complete an online assessment. This assessment consists of interactive questions designed to give us further insight into your experience and approach. It will simulate scenarios that you may encounter in the role. Applications close 11:59pm Wednesday 29 th July 2026. WAPHA reserves the right to commence shortlisting prior to the advertised close date. For further information please email [email protected]. Please note that applications must be submitted via the link provided – applications received by email will not be accepted. Applicants must hold current, unrestricted working rights in Australia to be eligible for this role. Candidates without valid authorisation to work in Australia will not be considered. Compliance with all relevant employment laws and regulations is mandatory. Successful candidates will be required to provide relevant qualifications, along with documentation including a valid visa (if applicable), passport, and police check upon request.