Cyber Security Officer - Products and Services

• Canberra, ACT (The agency supports and promotes flexible working, including remote options on negotiation and where appropriate based on the specifics of the role)
• Ongoing/Non-Ongoing (The position is Ongoing, however Non-Ongoing employment may be offered for an initial engagement of up to 12 months)
• $93,612 - $98,332 + Superannuation

About the Branch

The Digital Services Branch (DSB) enables the agency to achieve its mission by delivering innovative and adaptive digital and information and communications technology (ICT) capabilities. DSB provides modern tools, platforms, and services to facilitate a highly productive and digitally enabled environment for the agency and its stakeholders. DSB also runs a large-scale IT development and sustainment workstream to support the CER adopting new capabilities.

DSB innovates and influences the agency in embracing new and emerging technology to remain at the forefront of our sector.

About the Section

The Products & Services Section enables the Clean Energy Regulator to operate as a technology enabled organisation by providing secure, reliable and sustainable digital platforms and services. The section supports a democratised IT operating model, where technology capability is distributed across multiple delivery teams and business areas, by focusing on platform stewardship, vendor management, cyber security, and cross cutting enablement.

The section promotes shift left behaviours, automation and self service to reduce duplication and reliance on bespoke solutions. By identifying opportunities for reuse and consistency across platforms, Products & Services improves organisational resilience, scalability and the effective use of technology to deliver agency outcomes.

Role Responsibilities and Duties

The APS5 Cyber Security Officer performs cyber security operational and coordination activities to support the protection of agency systems, data and services. The role applies sound judgement to prioritise work, manage operational activities and ensure effective coordination with internal teams and service providers.

• Execute cyber security operational processes in accordance with approved procedures, including support for vulnerability management, endpoint security controls, and identity and access management.
• Independently monitor and manage IT security queues, including mailbox activities, prioritising requests based on impact, urgency and risk, and ensuring appropriate triage and escalation.
• Administer and coordinate access control and agency-managed security controls, including account lifecycle, privileged access and data loss prevention activities, ensuring compliance with policy and escalation of non-standard or high-risk requests.
• Support vulnerability management and incident response activities by coordinating remediation and response actions, tracking progress, and ensuring timely follow up with service providers and stakeholders.
• Maintain accurate records, logs and evidence, and contribute to cyber security reporting and dashboards to provide visibility of operational performance, trends and emerging risks.
• Support cyber security risk and assurance activities, including risk assessments, documentation, stakeholder engagement and incident response planning.
• Take responsibility for assigned work, applying judgement within established frameworks, contributing to continuous improvement, and participating in professional development and knowledge sharing.

Knowledge, Skills and Attributes

Essential

• Experience in IT operations, service delivery or cyber security, including working within structured processes such as ticketing, queues or incident management.
• Experience with Microsoft cloud platforms and services, including identity, access or security capabilities (e.g. Entra ID, Defender, Azure).
• Strong communication skills, including the ability to clearly manage requests, escalate issues and provide updates to technical and non technical stakeholders.

Desirable

• Experience working in a cyber security operations environment, including coordination with managed service providers.
• Relevant qualifications or certifications in IT or cyber security, or equivalent practical experience.
• Experience in performing secure code reviews and penetration testing.

Applications close 11.30pm on Wednesday, 26 August 2026