Information Security Management Officer

About Us

At WA Primary Health Alliance (WAPHA), we are dedicated to transforming and sustaining primary health care across Western Australia. As one of the 31 Primary Health Networks (PHNs) in Australia, we proudly manage three PHNs, guided by our 2023 - 2026 Strategic Plan. Since our establishment in 2015, we've been committed to strengthening primary care through innovative partnerships and a 'one health system' approach, ensuring better access to services and improved health outcomes.

Our work focuses on:

• Supporting general practices to deliver top-quality patient care.
• Funding local primary health services tailored to community needs.
• Connecting local services to simplify the health care system.
• Leading system-wide reform for long-term impact.

As an organisation that thrives in a dynamic environment, we embrace change and seek team members who are adaptable and flexible in their approach.

We are proud to be an inclusive organisation, welcoming applicants from all backgrounds, including Aboriginal and Torres Strait Islander peoples, LGBTIQA+ individuals, people from diverse cultures, and people living with disabilities.

Find out more about our values, workplace, and culture here.

About The role

Reporting to the Manager, Data Governance and Information Management, you will support the maintenance and continual improvement of WAPHA's Information Security Management System and assist with data governance, compliance, risk and audit-related activities.

You will work closely with stakeholders across the organisation to coordinate Digital and Data information registers, governance reporting, compliance activities, evidence collection, documentation management and continuous improvement initiatives.

🔹Employment Type: Full-time contract for 2 years

🔹 Location: WAPHA Head Office, Level 2, 1 Hood Street, Subiaco (Hybrid role)

🔹 Salary: Band 4 ($94k - $101k Plus 12% Superannuation)

Key tasks and responsibilities:

• Support the operation, maintenance and continuous improvement of WAPHA's Information Security Management System (ISMS).
• Maintain ISMS, Digital & Data and governance registers, records and reporting artefacts.
• Coordinate audit readiness activities including evidence management, compliance reviews and remediation tracking.
• Support ISO 27001 certification and assurance activities.
• Assist with information security risk workshops, action tracking and compliance monitoring.
• Develop and maintain information security and governance policies, procedures, standards, guidance materials and governance documentation.
• Support privacy, information management and data governance initiatives.
• Coordinate stakeholder engagement, data governance actions, reporting and committee activities.
• Monitor and track actions, findings and improvement activities to ensure timely completion.

About you

To be considered for this role, candidates must meet the following selection criteria:

Essential Experience & Qualifications

• Tertiary qualification or equivalent experience in information security, information management, data governance, privacy, records management, business or a related discipline.
• Experience supporting data governance, compliance, audit, risk, documentation or operational reporting activities.
• Strong written communication skills and exceptional attention to detail.
• Experience maintaining data registers, records, action trackers or governance documentation.
• Good working knowledge of Microsoft 365 collaboration and productivity tools.
• Ability to manage competing priorities and build positive stakeholder relationships.
• Practical understanding of information security, privacy, data governance or information management principles.

Highly Regarded

• Familiarity with ISO/IEC 27001 and Information Security Management Systems (ISMS).
• Experience supporting audits, compliance reviews or evidence management activities.
• Knowledge of information classification, records management or privacy frameworks.
• Experience maintaining dashboards, governance reports or workflow tracking tools.
• Experience developing procedures, guidance material or governance documentation

What we offer

• Hybrid working arrangement that combines remote work from home with office presence in our modern Subiaco office.
• Commitment to employee development.
• Salary packaging - WAPHA's arrangement allows for a maximum of $15,900 for general living expenses and $2,650 for entertainment benefits per fringe benefit tax year.
• Professional development opportunities.
• Employee Assistance Program.
• Additional paid parental leave.
• Gifted paid day off during Christmas shut down period.
• Annual $200 health and wellbeing reimbursement scheme.
• All employees have access to LinkedIn Learning.
• Study leave options available.
• Option to purchase additional leave.
• 13 weeks long service leave after 10 years of continuous services (accessible on a pro-rata basis after 7 years).

To Apply

Please submit your application by clicking the 'Apply' button.

Your application should include your CV. As part of our recruitment process, you will be invited to complete an online assessment. This assessment consists of interactive questions designed to give us further insight into your experience and approach. It will simulate scenarios that you may encounter in the role.

Applications close 11:59pm Wednesday 9th September 2026.

WAPHA reserves the right to commence shortlisting prior to the advertised close date.

For further information please email ••••@wapha.org.au. Please note that applications must be submitted via the link provided - applications received by email will not be accepted.

Applicants must hold current, unrestricted working rights in Australia to be eligible for this role. Candidates without valid authorisation to work in Australia will not be considered. Compliance with all relevant employment laws and regulations is mandatory.

Successful candidates will be required to provide relevant qualifications, along with documentation including a valid visa (if applicable), passport, and police check upon request.