Agency Chief Information Security Officer

About the role

The Agency Chief Information Security Officer (ACISO) will lead the cybersecurity function for public agencies, reporting to the agency CIO and Ministry Family CISO. This senior position supports digital transformation initiatives while ensuring the resilience and security of agency ICT assets.

Key responsibilities

• Define and implement agency‑level cybersecurity strategies, policies and work plans aligned with ministry goals.
• Conduct threat‑based risk assessments, develop mitigation plans and monitor risk exposure.
• Maintain visibility of ICT assets, security architectures and operations, and govern the overall security posture.
• Design, test and maintain incident response plans, playbooks and lead security incident investigations.
• Advise on and select cybersecurity technologies that meet business requirements and adhere to agency and wider government standards.
• Ensure secure‑by‑design product development and compliance with security controls.
• Develop and deliver cybersecurity awareness and training programmes for staff and vendors.

Required profile

• Degree in Computer Science, Information Systems, Engineering or a related technology field.
• 8‑10 years of management experience in information security, with a solid understanding of ICT operations, security policies and business processes.
• Proven ability to work with multi‑functional, multi‑disciplinary teams and to influence senior stakeholders.

Required skills

• Cloud security architecture and implementation on AWS, Azure and GCP.
• On‑premises infrastructure security.
• Identity and access management systems.
• Cybersecurity governance frameworks.
• Security operations, incident response and security testing.
• Architecture design and threat risk assessment.