Lead Spec Cyber Detect & Response CT/OT

Organisation/Entity: Transport For NSW

Job category: Information & Communication Technology

Job location:

Macquarie Park, NSW, AU, 2113

Job reference number: 108055

Employment type: Permanent Full-Time

Salary range: An attractive remuneration package

You're open to a change of direction and a new challenge. You bring structure, mitigation and education to our organisation. Our records and datasets are vast and varied. This is your opportunity to safeguard critical infrastructure, order and protect sensitive data, and defend against emerging cyber threats. You'll be part of an expert team who protect against thousands of threats every day.

In this role,you'll:

Lead the Cyber Detection and Incident Response capability, overseeing end to end cyber incident management including detection, triage, containment, eradication, recovery, and post incident review across both IT and OT environments. You will ensure a strong, coordinated response to Cyber incidents across a complex, critical infrastructure landscape. You will drive advanced threat detection and threat hunting strategies, leveraging telemetry, tools, and threat intelligence to proactively identify and reduce cyber risk. This includes continuously improving playbooks, automation, use cases, and overall cyber defence capabilities. You will lead day to day cyber security operations, ensuring alignment with government standards and regulatory requirements, while balancing incident response with longer term capability uplift. The role includes mentoring a high performing team and supporting ad hoc, out of hours response requirements for critical incidents.

You are a highly experienced cyber security leader with deep expertise in cyber defense, incident response, and threat detection across both IT and OT environments.

You bring strong hands on experience with cyber tools, threat hunting, and incident response frameworks, with the ability to respond to evolving threats and uplift organisational security posture. Relevant certifications such as CISSP, CISM, or equivalent are highly regarded.

You are an effective people leader and trusted advisor, with the ability to mentor teams, influence stakeholders, and communicate complex technical issues clearly while operating in high pressure, fast moving environments.

This is a Position of Trust and will require the successful applicant to hold Australian citizenship and to obtain and maintain a BASELINE Commonwealth security clearance under the Australian Government Protective Security Policy Framework.

Work Location

This role must bebasedfromthe advertised location.

Who we are

Our workforce is as diverse as the community we serve. If you'd like further information on our inclusion and diversity initiatives, visit Transport careers .

For more information about this role, please contact .

Aboriginal people and people living with disability are supported throughout the recruitment process and at work, and we encourage you to apply. Visit Supporting Aboriginal People or Supporting People with Disability for more information or speak to your talent team member to arrange any adjustments to how you interact with us.

Job Segment:

Cyber Security, Military Intelligence, Security Clearance, Web Design, Law, Security, Government, Legal, Creative

Transport acknowledges the Aboriginal people of the country on which we work, their traditions, culture and a shared history and identity. We also pay our respects to Elders past and present and recognise the continued connection to country.