Senior Specialist Cyber Risk

You excel at connecting the dots as a problem solver, ensuring the seamless delivery of reliable services from beginning to end.

You bring structure, mitigation and education to our organisation. Our records and datasets are vast and varied. This is your opportunity to safeguard critical infrastructure, order and protect sensitive data, and defend against emerging cyber threats. You'll be part of an expert team who protect against thousands of threats every day.

In this role, you'll:

Cyber risk isn’t just about frameworks and registers. It’s about people, decisions and action. Join our Cyber Risk & Culture team as a Senior Specialist Cyber Risk and bring your expertise to a team focused on improving how cyber risk is understood, owned and managed across the organisation. You’ll navigate complex cyber risks, provide trusted advice and influence risk-based decisions, while helping turn insights into meaningful action and contributing to stronger capability, continuous improvement and greater cyber resilience for Transport for NSW and the people of New South Wales.

• Lead complex cyber risk assessments, analysing potential impacts and providing practical advice on controls, mitigation and risk treatment strategies.
• Strengthen cyber risk management practices by contributing to the Cyber Risk Management Framework and continuously improving risk processes, methodologies and ways of working.
• Partner with and influence stakeholders to improve risk understanding, ownership and decision-making, while promoting a strong cyber risk culture across the organisation.
• Provide meaningful cyber risk insights and reporting, maintaining quality risk information and identifying trends, emerging threats and changes in the organisation’s cyber risk posture.
• Manage evolving areas of cyber risk, including third-party and vendor risk, control effectiveness, regulatory obligations and emerging technologies, to support stronger cyber resilience.

The team also comes together in person for activities such as branch all-in days, training sessions, planning workshops and collaborative work.


For more information on this position and business unit, view the role description and information pack.

About you

• Qualifications in Cyber Security, Information Technology or a related field, or equivalent demonstrated experience.
• Experience leading cyber risk assessments, managing risk registers and implementing risk treatment plans.
• Strong knowledge of cyber security governance, risk management methodologies and compliance frameworks.
• Intermediate to advanced Power BI skills and advanced Microsoft Excel capability, including formulas and data analysis, with experience using these tools to support reporting and insights.
• Relevant industry certifications such as CISSP, CISM or CRISC, or progress towards achieving certification.

Who we are

Transport for NSW provides a safe, integrated, and efficient transport system. We connect people, communities and industry every day.

Join us

Our workforce is as diverse as the community we serve. If you’d like further information on our inclusion and diversity initiatives, visit Transport careers.