Chief Information Security Officer

Chief Information Security Officer

1 x Full Time Permanent

Australian Citizens or Permanent Residents only

Substantive Equality Statement
Lotterywest and Healthway strive to create a hopeful, healthy, connected and sustainable community life for all Western Australians, where diversity is encouraged, and everyone is respected, welcomed, supported, and treated equally. We value the strength of a diverse workforce and view inclusivity as essential to our success. We are committed to fostering a respectful and inclusive workplace and community that encourages employees to be themselves.
We seek and celebrate diversity and encourage applications from all backgrounds and cultures including Aboriginal and Torres Strait Islander people, LGBTQIA+ and people with disability.

The Organisation
Lotterywest is uniquely the only Government owned and operated lottery in Australia. We have supported the community for over 90 years with the purpose to operate a responsible and sustainable lottery that leaves an enduring positive impact for WA.
Lotterywest is also the employing agency for Healthway, the only State Government department dedicated to health promotion. For over 30 years, Healthway has funded projects and research to inspire Western Australians to live healthier lives.

What we Offer
Being part of Australia's only government-owned Lottery comes with a lot of responsibility and we wouldn’t have it any other way. We own the outcome of our actions and by directly contributing to player safety and a more hopeful community life for Western Australians, working at Lotterywest is naturally rewarding for all involved.

Our workplace strives to provide an environment for you to feel valued and supported, so that you can help create the kind of positive impact we want to see.

Our employee benefits include:

• A flexible work environment, with the option to work full time in the office or up to two days remotely.
• Four weeks annual leave, with the ability to purchase up to 10 weeks additional leave.
• Additional public service holidays
• A workplace that is committed to ensuring you peruse professional development opportunities
• An active employee wellbeing program, with a variety of social and wellness events.
• Quarterly volunteering leave entitlement
• Access to become a Fitness Passport member
• A central Head Office location in the heart of Subiaco, with excellent access to public transport, a range of public parking options and end-of-trip facilities for staff choosing to cycle, run or walk to work.

Job Description
Reporting to the Chief Information Officer (CIO) and working directly with other Executives as required, this role oversees information/cyber security risk management and is responsible for the development of Lotterywest’s information/cyber security culture and resilience.

The role seeks to develop and maintain technologically current, highly integrated and secure security architecture and secure business practices. The role involves scoping, designing, evaluating, and reviewing end-to-end security solutions and working closely with Lotterywest’s Technical Services function and the Cybersecurity team under Strategy and Enablement, to prioritise and deliver technical security initiatives.

The role has the following key areas of focus:

• System security - Developing, implementing, monitoring, and reviewing information security strategy, solutions and practices, to mitigate risk and support good practice.
• Risk management - Ensuring the assets and information of Lotterywest are appropriately secured at all times by identifying areas of security risks and addressing areas of exposure.
• Compliance – Monitoring, reviewing, enforcing and reporting compliance with information security strategies and practices to ensure desired security standards are being met.
• Governance - Oversight of system security governance and business operating practices, investigation of security breaches and meeting government security reporting obligations.

Mandatory / special role requirements

• Drivers licence / Police Clearance / After-hours work

Essential selection criteria

1. Extensive experience in technical information/cyber security analysis, governance and risk management
2. Demonstrated knowledge of information/cyber security architecture and security testing
3. Experience in ISMS and knowledge of ISO/IEC 27001 Standard, NIST,PCI DSS and the Essential 8 framework.
4. Demonstrated high level ability to work collaboratively across teams
5. Demonstrated high level experience developing and managing relationships with internal and external customers, business partners and stakeholders
6. Demonstrated high level communication skills including the ability to build trust and influence

Required Qualification
This role requires possession of a relevant tertiary qualification and/or at least 5 years’ experience managing an information/cyber security function for a comparable organisation.

Want to know more?
If you are driven to succeed and drive change within our organisation and in the WA community, we’d love to hear from you. To be sure this role is right for you, please read the attached job description.

Applying for a State Government role can look a bit different, so we do encourage you to read the attached Job Application pack to ensure your application sets you up to succeed.

Suitable applicants may be considered for future similar employment opportunities during the next twelve (12) months at Lotterywest.

For Further Job Related Information
Enquiries about the role can be directed to Caroline Niewiarowski-Fish, Chief Information Officer via Pina Fiorenza, Management Support Officer on (08) 9488 6245

Join Lotterywest
Applicants are required to apply online and need to submit the following documents in Word or PDF format only:

1. A current resume/CV
2. A cover letter of no more than two (2) pages addressing addressing your capability to demonstrate essential criteria 1, 2 & 3 only

• Extensive experience in technical information/cyber security analysis, governance and risk management
• Demonstrated knowledge of information/cyber security architecture and security testing
• Experience in ISMS and knowledge of ISO/IEC 27001 Standard, NIST,PCI DSS and the Essential 8 framework.
  

To submit your application, please click on the Apply for the job button.

If you have any support or access needs that may require adjustments to allow you to fully participate in this selection process, please contact:

Simone Boud, Human Resources Business Partner on (08) 9488 6712. 

Unfortunately, we can’t accept late applications so please allow yourself enough time to complete your application before the due date and time.

Protecting your Privacy 
Lotterywest will only contact you from the official @lotterywest.wa.gov.au domain. If you receive any emails from any other domain asking for your personal information, you should not respond to them. If you receive what appears to be Lotterywest communications not from the official domain, please send an email with the details to HumanResourceServices@lotterywest.wa.gov.au  

Closing date: 2025-01-10 9:30 AM