Address Northern Territory Government
JOB DESCRIPTION
Job title Principal, Information and Cyber Security
Classification PWC Band 4 Admin Corporate Services FT Position No. 46445
Job type Full time Duration Ongoing
Business unit Core Operations Location Darwin
Reports to Senior Manager Cyber Security Reports to P/No. 46447
Inclusion and Power and Water values diversity. Power and Water encourages people from all diversity groups to apply for
diversity and vacancies and accommodates people with disability by making reasonable workplace adjustments. If you
Special Measures require an adjustment for the recruitment process or job, please discuss this with the contact officer. For more
recruitment plans information about applying for this position and the merit process, go to the OCPE website.
Information for Applications must include a one-page summary about you, a detailed resume and copies of all relevant tertiary
Applicants qualifications listed in your application.
Information about If you accept this position, a detailed summary of your merit (including work history, experience, qualifications,
Selected skills, information from referees, etc.) will be provided to other applicants, to ensure transparency and better
Applicant’s Merit understanding of the reasons for decision. For further information: click here
PRIMARY OBJECTIVE
The Principal, Information and Cyber Security is an integral member of the Cyber Security team contributing to the strategic and
organisational goals of Power and Water. The role defines and develops the Information, Communication and Technology security
requirements for Power and Water and is pivotal in safeguarding against emerging threats and disruptions alongside providing leadership
and advice on security measures and recommendations to ensure that Information and systems are protected.
KEY RESPONSIBILITIES
The “WHAT” to be delivered
Functional
Maintains visibility and assesses the risk of emerging or potential Cyber Security threats raising awareness and improving internal
controls to minimise business disruption
Leads the mitigation required to manage various levels of risk tolerance and exposure relating to Cyber Security across the organisation
Liaises with local and federal government departments, as well as utility industries and other third parties, in order to better assess,
prepare for and manage Cyber Security events
Drives and promotes application of the Enterprise Sustainability Policy and Enterprise Architecture principles from a security
perspective
Leads technical architecture and system implementation by designing and implementing robust Cyber Security architectures, including
firewalls, intrusion detection/prevention systems, endpoint protection, and security monitoring solutions.
Leads proactive vulnerability scanning, assessment, and remediation efforts prioritising mitigation strategies based on risk
Spearhead the development and execution of incident response plans in order to achieve effective responses to security breaches,
containing threats, and minimising damage and disruption
Leadership
Ownership and accountability for driving meaningful and sustainable change across the Cyber Security function (including investing
and building sustainable capabilities among employees, while increasing engagement and job satisfaction)
Development and review of Performance Development Plans for direct reports
Ability to manage upwards at Senior Management level and obtain support in an environment of conflicting priorities and perspectives
Be prepared to take on new challenges and promote change as required
Assist in the setting of performance targets and participate in the business planning process
Project Management
Contribute to Enterprise Architecture and portfolio prioritisation, sequencing and planning to ensure appropriate consideration to
security
From time to time, be involved in development of project plans, project requirements and costing to support project implementation
Evaluate and review the effectiveness of project implementation through a Cyber Security lens
Quality
Support a continuous improvement culture, developing and reviewing processes and procedures to maintain currency and relevance
to legislative, regulatory and other work requirements
Customer
Maintain and promote a high standard of customer service including building strong internal and external customer relationships
ensuring secure and reliable service delivery
LAST UPDATED: 10MAR2020 EMPLOYEE SIGNATURE: __________________________ DATE: ____________
AT POWER AND WATER:
Job Description Northern Territory Government
COMPETENCY PROFILE
“HOW” to do it (refer to Power and Water’s Behavioural Competency Guide)
Builds effective teams Building strong-identity teams that apply their diverse skills and perspectives to
achieve common goals
Courage Stepping up to address difficult issues, saying what needs to be said
Cultivates innovation Creating new and better ways for the organisation to be successful
Customer focus Building strong customer relationships and delivering customer-centric solutions
Directs work Providing direction, delegating, and removing obstacles to get work done
Interpersonal acumen Relating openly and comfortably with diverse groups of people
Plans and aligns Planning and prioritizing work to meet commitments aligned with organisational goals
Resourcefulness Securing and deploying resources effectively and efficiently
MANAGEMENT RESPONSIBILITIES
No. of Direct Reports 2 No. of Indirect Reports 2
Key Interactions: Executive Leadership Team (ELT), Senior Leader Group (SLG), NTG Security Leadership Group (NTG
SLG), NTG Cyber Security team, Federal departments, vendor partners and all employees
COMPLIANCE
We expect you to:
Actively align, support and promote Power and Water Corporation’s (PWC) Values and support building a constructive workplace
culture that celebrates achievement through its people
Carry out duties in accordance with PWC’s Safety and Environmental policies and procedures, working towards our goal of Zero
Harm
Ensure all activities undertaken as a Power and Water employee comply with PWC’s Code of Conduct , Management Standards and
Procedures, relevant Acts, legal demands and that you manage all of your activities and responsibilities within the PWC risk
management framework
SELECTION CRITERIA
Qualification and Skills Experience
Essential • Cyber security technical knowledge and • Significant experience in the field of cyber
understanding of standards and frameworks such security, information security and Cyber risk
as Essential 8, AESCSF, NIST, ISO 27001, management
Information Privacy Principles and PCI DSS • Strong analytical and problem-solving skills and
Proven skills in network security, vulnerability the ability to investigate and analyse threats,
management, incident response, threat breaches, and major incidents that result in
intelligence and Cybersecurity tools and mitigation controls and strategies
techniques • Proven experience in navigating through
Excellent interpersonal and communication skills ambiguity, managing multiple priorities and
with the ability to express ideas clearly along with deadlines in complex operating environment
the ability to foster collaborative working
partnerships
Negative Vetting 1 (NV1) security clearance or a
willingness to attain NV1
Desirable • Relevant tertiary qualifications • Relevant experience in a regulated multi-utility or
Cyber Security industry certifications such as similar environment
CISM, CISSP, SANS ICS or equivalent in • Experience in both IT and OT environments
experience
FURTHER INFORMATION
1. Contact Alex Knowler on 0401 116 656 or further information about the position
2. Information about Power and Water Corporation may be viewed at powerwater.com.au
3. The total remuneration package amounts published for this position include base salary, superannuation and annual leave loading
and the value of an extra week’s annual leave.
Apply Online: Approved
https://jobs.nt.gov.au/Home/JobDetails?rtfId=292412
Vacancy Closes: 03/04/2024 Phil Lane
General Manager Technology and Systems
AT POWER AND WATER:
