Australian Charities and Not-for-profits Commission Cyber Security and Identity Manager

We are seeking an experienced information security manager to lead cyber security, and identity and access management functions across the Australian Charities and Not-for-profits Commission’s (ACNC) digital services environment.

The Cyber Security and Identity Manager is responsible for establishing and maintaining trust in ACNC systems, data and digital services by ensuring appropriate security, identity and assurance controls are designed, implemented and operating effectively. It plays a critical role in ensuring the right people have the right access at the right time, supporting ACNC systems that are secure, auditable, and trusted by staff, charities and the broader community.

You will provide strategic leadership of identify and access management, digital trust controls, cyber security assurance and related governance activities. You’ll oversee workforce identify, public identity supporting the Charity Register and Portal, and partner/API trust arrangements, ensuring risks are effectively managed and controls remain aligned with ACNC requirements.

Leading a small team, you will coordinate business hours security monitoring and incident triaging. You’ll oversee trust-impacting changes delivered by internal and external parties, provide expert advice on complex security matters, and act as the primary escalation and coordination point for digital trust and security issues. 

Ideal Candidate Points:

• has demonstrated experience across technologies such as Entra ID, Defender, Sentinel and related networking environments to support secure and trusted digital services
• provides leadership of identity and access management outcomes for workforce and public identities, implementing policy-based controls and governance
• shapes and governs identity and security controls that support secure workforce and public-facing digital services
• has strong vendor and service management capability, governing outsourced technical services across, and maintaining accountability for delivery, change, quality, and compliance
• leads cyber security assurance risk management activities, translating complex technical issues and security risks into clear business impacts, advice and evidence-based recommendations that drive practical uplift across people, processes and technology
• leads and develops a high-performing team, fostering capability, collaboration, accountability and continuous improvement.

The Australian community requires the highest integrity of ACNC staff. Our ideal candidate also acts with integrity, makes ethical decisions and embodies our cultural traits and APS values.

We encourage Aboriginal and Torres Strait Islander peoples, culturally and linguistically diverse people and people with disability or neurodivergence to apply.

We determine whether an organisation meets the legal definition of charity and we work to ensure charities understand and meet their obligations by providing guidance and support. Located in Melbourne CBD, we are proud to have a diverse workforce that understands our vision and purpose and is made up of people who are committed to achieving our Corporate Priorities. We work hard to attract and retain talented staff. We promote a people centred culture that models our values and understands our vision and purpose. You may be required to undergo integrity checks during the course of your engagement with the ACNC. Find out more information about us on our website https://www.acnc.gov.au/about.