Cyber Resilience Officer

Cyber Resilience Officer

Competitive Salary, Plus Salary Packaging & Super

Full Time Permanent Position

South Perth

Join our team as a Cyber Resilience Officer and play a pivotal role in strengthening and protecting RAAFA’s cyber security posture.

As the Cyber Resilience Officer, you will be responsible for the operational management, administration and continuous improvement of RAAFA’s Cyber Resilience Framework and Information Security Management System (ISMS). Working collaboratively across all areas of the business, you will drive a security-conscious culture and lead cyber resilience initiatives that support RAAFA’s strategic objectives, risk appetite, and regulatory obligations.

Benefits to you:

• Competitive Salary - RAAFA Continues to support our people with industry leading salaries!
• Salary packaging – as a non-profit organisation, you can salary package up to $18,549!
• Career & Development Paths – RAAFA offers various ongoing career development opportunities!
• Employee Assistance Program - Access confidential counselling services for personal or work-related issues!
• Employee Referral Program - earn bonuses for recommending friends!
• Long Service Recognition - Be celebrated by the entire organisation at 5-year service milestones!
• RAAFA Rewards - Discounted services including health insurance and gym membership!
• Corporate Zoo Membership - Visit Perth Zoo for free!
• Aviation Heritage Museum - Free entry for RAAFA staff!
• Supportive culture - be welcomed into an organisation who provide a supportive, friendly and positive culture within all our staffing groups!

The role & you:

• Lead, administer and continuously improve RAAFAs Information Security Management System (ISMS) and cyber resilience framework, ensuring ongoing effectiveness, compliance, reporting and monitoring.
• Act as the primary coordination point for security monitoring, alert triage (including SIEM detections/SOC alerts), incident escalation and threat response activities, in partnership with ICT, business stakeholders and external security providers to assess risk, coordinate remediation and drive continuous improvement.
• Maintain awareness of emerging threats relevant to the sector and incorporate these into risk planning activities.
• Lead RAAFA's cyber incident preparedness by maintaining, testing and continuously improving the Cyber Incident Response Plan, including facilitating regular tabletop exercises with key stakeholders.
• Coordinate cyber threat identification, vulnerability management and assurance activities, including risk assessments, penetration testing, security audits and remediation initiatives.
• Monitor and respond to identified security weaknesses, including misconfigurations, compromised accounts, suspicious endpoint activity and malicious email events.
• Track remediation activities and report on vulnerability and risk treatment status.
• Lead RAAFAs cyber awareness and education program through targeted training, phishing simulations, communications and engagement initiatives that promote cyber literacy and a culture of security aware, championing cyber resilience as an organisational capability.
• Tailor training content and delivery methods to suit diverse workforces, varying levels of digital literacy, and multiple work environments. (Office-based, clinical, community, and home settings).
• Conduct security assessments of new systems, technology changes and third-party providers to ensure security risks are identified and managed.
• Support procurement and contract management processes by ensuring security requirements are embedded within vendor evaluations, agreements and ongoing assurance activities.
• Monitor vendor compliance with RAAFAs security requirements throughout the contract lifecycle.
• Maintain, coordinate and drive the implementation of roadmap actions, reporting on progress.
• Monitor the effectiveness of cyber security controls, assess cyber maturity and recommend improvement initiatives for management consideration.
• Prepare governance and compliance reports for the Board and Executive Leadership Team as required.
• Maintain the cyber risk register and coordinate the implementation and monitoring of risk treatment plans with relevant business owners.
• Develop, review, and maintain all information security and cyber resilience policies, procedures, standards, guidelines and tools in accordance with legislative, regulatory, and contractual obligations and best practice.

About you:

• Tertiary qualification in Cyber Security, or a related discipline, or equivalent demonstrated professional experience.
• Postgraduate qualifications in Cyber Security or Information Security Management (Desirable).
• 2-5 years of professional experience in a cyber security, information security, or cyber resilience role.

About us:

Our organisation is nearly 100 years old and built on foundations of care and support, core values that still stand strong throughout all our services today. To this end, we are proud of our heritage, the services we deliver and our people!

Our core values of Respect, Care and Honesty underpin who we are, our behaviours and how we operate, we call this The RAAFA Way! We have an amazing culture, led by our people who make a real impact to the lives of those we care for every single day.

What you need to do:

• Update your resume
• Be eligible to work in Australia
• Satisfactory National Police Certificate (on commencement of employment to be within six months from date of issue) or willing to obtain one
• Be up to date with your Flu vaccinations
• Click “Apply to this Job”

For more information, please call or email us on 08 •••• •410

or ••••@raafawa.org.au

RAAFA WA reserves the right to withdraw, shortlist and interview applicants prior to this date