Job Description

You’re open to a change of direction and a new challenge.

You bring structure, mitigation and education to our organisation. Our records and datasets are vast and varied. This is your opportunity to safeguard critical infrastructure, order and protect sensitive data, and defend against emerging cyber threats. You'll be part of an expert team who protect against thousands of threats every day.

In this role, you'll:

Lead the Cyber Detection and Incident Response capability, overseeing end‑to‑end cyber incident management including detection, triage, containment, eradication, recovery, and post‑incident review across both IT and OT environments.

You will ensure a strong, coordinated response to Cyber incidents across a complex, critical infrastructure landscape.

You will drive advanced threat detection and threat‑hunting strategies, leveraging telemetry, tools, and threat intelligence to proactively identify and reduce cyber risk.

This includes continuously improving playbooks, automation, use cases, and overall cyber defence capabilities.

You will lead day‑to‑day cyber security operations, ensuring alignment with government standards and regulatory requirements, while balancing incident response with longer‑term capability uplift.

The role includes mentoring a high‑performing team and supporting ad hoc, out‑of‑hours response requirements for critical incidents.

For more information on this position and business unit, view the and information pack

About you

You are a highly experienced cyber security leader with deep expertise in cyber defense, incident response, and threat detection across both IT and OT environments.

You bring strong hands‑on experience with cyber tools, threat hunting, and incident response frameworks, with the ability to respond to evolving threats and uplift organisational security posture. Relevant certifications such as CISSP, CISM, or equivalent are highly regarded.

You are an effective people leader and trusted advisor, with the ability to mentor teams, influence stakeholders, and communicate complex technical issues clearly while operating in high‑pressure, fast‑moving environments.

This is a Position of Trust and will require the successful applicant to hold Australian citizenship and to obtain and maintain a BASELINE Commonwealth security clearance under the Australian Government Protective Security Policy Framework.

Who we are

Transport for NSW provides a safe, integrated, and efficient transport system. We connect people, communities and industry every day.

Join us

Our workforce is as diverse as the community we serve. If you’d like further information on our inclusion and diversity initiatives, visit Transport careers