Job Description

You’re open to a change of direction and a new challenge.

You bring structure, mitigation and education to our organisation. Our records and datasets are vast and varied. This is your opportunity to safeguard critical infrastructure, order and protect sensitive data, and defend against emerging cyber threats. You'll be part of an expert team who protect against thousands of threats every day.

In this role, you'll:

Lead the Identity & Security domain, owning the strategy, target-state architecture and multi-year roadmap for the identity, access and security platforms that protect Transport's digital environment.

This spans identity governance and administration, authentication and access management (including single sign-on, multi-factor and conditional access), privileged access, directory services, and the supporting security platforms.

You'll act as the domain's technical authority, setting and governing architecture standards, principles and blueprints, and providing assurance across all identity and security initiatives so solutions are secure-by-design, compliant and scalable.

You'll govern managed service providers and key vendors to architectural intent, lead domain input into investment planning and business cases (tied to strategic risk reduction and value), and maintain modernisation and decommissioning roadmaps that address technical debt, platform lifecycle and emerging threats.

You'll provide technical oversight to programs and projects, resolving complex risks and keeping delivery aligned to the target state and to cyber and regulatory obligations such as the NSW Cyber Security Policy and Essential Eight.

You'll drive thought leadership on modern security architecture, including Zero Trust, identity-centric security and cloud-first access models.

You'll partner closely with Cyber Security, Enterprise Architecture and delivery teams to ensure security is embedded by design into every solution, and engage senior stakeholders across the organisation to balance protection with user experience and operational efficiency.

For more information on this position and business unit, view the and information pack

About you

You're an identity and security leader who operates at a strategic level, comfortable as the technical authority shaping standards, roadmaps and assurance, not just delivering solutions.

You bring deep expertise across identity and access management (governance, authentication, privileged access and directory services) and modern security architecture, with a strong grounding in cyber security frameworks and risk management.

You're experienced in governing vendors and managed service providers to architectural standards, shaping investment cases and modernisation roadmaps, and embedding Zero Trust and identity-centric principles across a large, complex enterprise.

You're a credible, trusted advisor who can influence senior stakeholders, give frank advice under pressure, and deliver secure, compliant, scalable identity and access outcomes.

Essential requirements:

• Relevant tertiary qualifications in information technology or cybersecurity
• Industry certifications such as CISSP, CISM, or equivalent
• Employment screening checks as per government standards

Who we are

Transport for NSW provides a safe, integrated, and efficient transport system. We connect people, communities and industry every day.

At Sydney Trains, our rail services keep Sydney moving by putting our customers at the centre of everything we do. We work with our local communities to deliver safe, timely and efficient rail services 24 hours a day, seven days a week.

Our trains and network are evolving to meet the needs of our customers now and well into the future. We’re continuing to integrate technological innovations that help us deliver a smarter and more sustainable network.

Join us

Our workforce is as diverse as the community we serve. If you’d like further information on our inclusion and diversity initiatives, visit Transport careers