Coordinator, Infosecurity, Compliance, Risk And Audit

Job details

Position status Permanent Position type Full-time Occupational group IT & Telecommunications Classification AO6 Workplace Location Brisbane Inner City Job ad reference QLD/EHQ/ETSB553273 Closing date 10-Apr-2024 Yearly salary Fortnightly salary Total remuneration Salary Other Job duration Permanent full-time Contact person Helen Murray Contact details 0448183829

Access the National Relay Service

The role:

This role will be under the direction of the Chief Information Officer, Rural and Remote (CIO, RR) to support coordination of Information Security, Compliance, Risk and Audit for the western Queensland HHS's. The implementation of Information Security Management Systems (ISMS) for western Hospital and Health Services (HHSs) is an important aspect of the role. The outcome of the role will be the enablement of the CIO, RR and Health Service Chief Executives (HSCEs) for North West, Central West and South West HHSs (western HHSs) to meet compliance obligations of ISMS, Health Service Directives, Digital Policy Framework, Audit program and ICT risk management.

The role will contribute to the coordination of ICT risk, audit, compliance and ISMS implementation activities throughout the western HHSs to ensure ICT and digital health services meet all relevant directives, digital policies, procedures, internal and external guidelines, standards and regulations.

Key responsibilities include:

• In alignment with HHS frameworks, develop an ICT audit, Risk and compliance framework comprising a set of components that provide the foundations and organisational arrangements for designing, implementing, monitoring, reviewing and continually improving ICT and digital health risk, audit and compliance management throughout the western HHSs.
• Enable the facilitation of internal reviews, audits and develop reports to ensure that western HHSs are aligning with ICT and digital health compliance obligations. Develop and monitor Compliance Action Plans in response to identified non-compliance.
• Apply a working knowledge of compliance uplift of ICT and digital health related Health Service Directives, Digital Policy, ISMS and associated policies, procedures, standards, guidelines and implementation, monitoring and response to audit recommendations to support overall HHS compliance uplift.
• Work collaboratively with stakeholders and internal and external service providers to ensure ICT and digital health services remain compliant with applicable legislation, directives, policies, procedures, internal and external guidelines, standards and regulations.
• Be directed by the CIO, RR to optimise governance and escalation pathways for ICT and digital health compliance, ensuring consistent processes are in place for management and committees to review, prioritise and approve corrective actions.

Are you right for this role?

To be successful in this role you will demonstrate high level understanding and technical skills in the following:

• Demonstrated skills in the design, application, and review of an Information Security Management System (ISMS) within the healthcare sector (SFIA: BPTS 5; CHMG 5; CFMG 5; PEDP 5; QUAS 5; ITSP 4).
• Demonstrated experience in managing cybersecurity audit and risk management frameworks, methodologies and guidelines and ensure compliance with regulations and standards (SFIA: CPOL 5; QUMG 5; BURM 5; SCAD 6).
• Demonstrated experience in managing ICT and digital services governance frameworks and guidelines and ensure compliance with regulations, policies, strategy and standards (SFIA: CPOL 5; GOVN 6; PBMG 5; SLMO 5).
• Ability to apply contemporary leadership principles to contribute to the maintenance of an effective and motivated compliance program.
• Demonstrated experience in the high-level design, implementation and operation of ICT and digital health systems and services in a complex environment (SFIA: HWDE 6; ISCO 6).
• Demonstrated skills in the analysis of ICT and digital health system risks and issues and the formulation, design and provision of appropriate solutions and improvements. Ability to apply information technology skills to solve information security issues (SFIA: DGFS 6; INAS 6; SCTY 6; MEAS 5 PENT 4; VUAS 4).
• High-level communication and engagement skills to enable effective interaction in individual and group situations. Proven ability to communicate efficiently and effectively at all levels with staff and stakeholders both orally and in writing (SFIA: METL 6; ORDI 5).

Benefits of working with eHealth Queensland:

By joining eHealth Queensland, you will work within a fast-paced, challenging and supportive environment where every employee plays a critical role in our ongoing success.

You will enjoy a variety of benefits, including:

• Competitive salary + generous superannuation and leave loading
• Flexible working arrangements
• Diverse work culture
• Career training and development

To apply for this exciting opportunity, submit your resume and short statement (max 2 pages) online today.

Further information

We are committed to building inclusive cultures in the Queensland public sector that respect and promote human rights and diversity.

Applications will remain current for a period of up to 12 months and may be considered for other vacancies which may include an alternative employment basis (temporary; full time or part time).

Documents

Before applying for this vacancy please ensure you read the documents below.

• AO6 Coordinator, InfoSecurity, Compliance, Risk & Audit RD (PDF, 273KB)

Role Description

Queensland Health Applicant Pack (PDF, 946KB)

Application Kit

*