Lead Specialist, Cyber Detection & Incident Response - CT/OT
Organisation/Entity: Transport For NSW
Job category: Information & Communication Technology

Job location:
Macquarie Park, NSW, AU, 2113

#job-location.job-location-inline { display: inline; }
Job reference number: 108055
Employment type: Fixed Term Full-Time
Salary range: An attractive remuneration package
.buttontext84e7fa5614fe8498 a{ border: 1px solid transparent; } .buttontext84e7fa5614fe8498 a: focus{ border: 1px dashed #0085b3 !important; outline: none !important; }

You’re open to a change of direction and a new challenge.

You bring structure, mitigation and education to our organisation. Our records and datasets are vast and varied. This is your opportunity to safeguard critical infrastructure, order and protect sensitive data, and defend against emerging cyber threats. You'll be part of an expert team who protect against thousands of threats every day.

In this role, you'll:
Lead the Cyber Detection and Incident Response capability, overseeing end‑to‑end cyber incident management including detection, triage, containment, eradication, recovery, and post‑incident review across both IT and OT environments.

You will ensure a strong, coordinated response to Cyber incidents across a complex, critical infrastructure landscape.

You will drive advanced threat detection and threat‑hunting strategies, leveraging telemetry, tools, and threat intelligence to proactively identify and reduce cyber risk.

This includes continuously improving playbooks, automation, use cases, and overall cyber defence capabilities.

You will lead day‑to‑day cyber security operations, ensuring alignment with government standards and regulatory requirements, while balancing incident response with longer‑term capability uplift.

The role includes mentoring a high‑performing team and supporting ad hoc, out‑of‑hours response requirements for critical incidents.

For more information on this position and business unit, view the role description and information pack.

About you

You are a highly experienced cyber security leader with deep expertise in cyber defense, incident response, and threat detection across both IT and OT environments.

You bring strong hands‑on experience with cyber tools, threat hunting, and incident response frameworks, with the ability to respond to evolving threats and uplift organisational security posture. Relevant certifications such as CISSP, CISM, or equivalent are highly regarded.

You are an effective people leader and trusted advisor, with the ability to mentor teams, influence stakeholders, and communicate complex technical issues clearly while operating in high‑pressure, fast‑moving environments.

This is a Position of Trust and will require the successful applicant to hold Australian citizenship and to obtain and maintain a BASELINE Commonwealth security clearance under the Australian Government Protective Security Policy Framework.

Who we are

Transport for NSW provides a safe, integrated, and efficient transport system. We connect people, communities and industry every day.

Join us

Our workforce is as diverse as the community we serve. If you’d like further information on our inclusion and diversity initiatives, visit Transport careers.

Flexible work options may be available. Learn more via Flexible work options and policy

Apply today

Applications close 11:59 PM Thursday 25 June 2026

For more information about this role, please contact SHANKAR.SAPKOTA@TRANSPORT.NSW.GOV.AU.

Aboriginal people and people living with disability are supported throughout the recruitment process and at work, and we encourage you to apply. Visit Supporting Aboriginal People or Supporting People with Disability for more information or speak to your talent team member to arrange any adjustments to how you interact with us.

Learn more about how to apply via Our recruitment process | Transport for NSW

#LI-Hybrid

Job Segment: Cyber Security, Military Intelligence, Security Clearance, Web Design, Law, Security, Government, Legal, Creative