Information Security Officer - Transport Business

About the role

The Business Information Security Officer (BISO) leads cyber security, risk management, compliance, and security enhancement activities within the Transport sector, ensuring alignment with regulatory standards, contractual obligations, and industry best practices.

Responsibilities

• Serve as the primary cyber security advisor, collaborating with executive, operational, engineering, and technology teams.
• Identify, assess, and mitigate cyber risks; lead security uplift initiatives.
• Provide guidance on controls, governance, and compliance, including OT security for systems like SCADA and industrial control environments.
• Support audits, incident preparedness, and security reporting to enhance resilience.
• Embed security-by-design principles and promote continuous security improvements.

Requirements

• Proven experience in senior cyber security roles, such as BISO, CISO, or Security Lead, ideally within transport or critical infrastructure sectors.
• Strong knowledge of cyber governance, risk management, compliance, and OT security.
• Familiarity with the SOCI Act and infrastructure security obligations.
• Excellent stakeholder engagement, communication, and influencing skills across diverse audiences.
• Relevant qualifications in Cyber Security, IT, Engineering, or related fields; certifications like CISSP or CISM are highly regarded.
• Ability to obtain necessary security clearances; Australian citizenship is required.