Transport for NSW is hiring a Senior Manager Cyber Security Operations to lead the Cyber Detection and Incident Response capability across IT and OT, overseeing end-to-end incident management, driving threat detection and hunting, and refining playbooks. You’ll mentor a team, coordinate responses to complex incidents, and balance immediate containment with longer-term capability uplift while complying with government standards. Key requirements are deep cyber defense leadership, hands-on incident response and threat hunting, and certifications such as CISSP or CISM; Australian citizenship and the ability to obtain a BASELINE clearance. Apply by 11:59 PM Thursday 25 June 2026. Questions to [email protected].
You’re open to a change of direction and a new challenge.
You bring structure, mitigation and education to our organisation. Our records and datasets are vast and varied. This is your opportunity to safeguard critical infrastructure, order and protect sensitive data, and defend against emerging cyber threats. You'll be part of an expert team who protect against thousands of threats every day.
In this role, you'll:
Lead the Cyber Detection and Incident Response capability, overseeing end‑to‑end cyber incident management including detection, triage, containment, eradication, recovery, and post‑incident review across both IT and OT environments.
You will ensure a strong, coordinated response to Cyber incidents across a complex, critical infrastructure landscape.
You will drive advanced threat detection and threat‑hunting strategies, leveraging telemetry, tools, and threat intelligence to proactively identify and reduce cyber risk.
This includes continuously improving playbooks, automation, use cases, and overall cyber defence capabilities.
You will lead day‑to‑day cyber security operations, ensuring alignment with government standards and regulatory requirements, while balancing incident response with longer‑term capability uplift.
The role includes mentoring a high‑performing team and supporting ad hoc, out‑of‑hours response requirements for critical incidents.
For more information on this position and business unit, view the role description and information pack.
About you
You are a highly experienced cyber security leader with deep expertise in cyber defense, incident response, and threat detection across both IT and OT environments.
You bring strong hands‑on experience with cyber tools, threat hunting, and incident response frameworks, with the ability to respond to evolving threats and uplift organisational security posture. Relevant certifications such as CISSP, CISM, or equivalent are highly regarded.
You are an effective people leader and trusted advisor, with the ability to mentor teams, influence stakeholders, and communicate complex technical issues clearly while operating in high‑pressure, fast‑moving environments.
This is a Position of Trust and will require the successful applicant to hold Australian citizenship and to obtain and maintain a BASELINE Commonwealth security clearance under the Australian Government Protective Security Policy Framework.
Who we are
Transport for NSW provides a safe, integrated, and efficient transport system. We connect people, communities and industry every day.
Join us
Our workforce is as diverse as the community we serve. If you’d like further information on our inclusion and diversity initiatives, visit Transport careers.
Flexible work options may be available. Learn more via Flexible work options and policy
Apply today
Applications close 11:59 PM Thursday 25 June 2026
For more information about this role, please contact [email protected].
Aboriginal people and people living with disability are supported throughout the recruitment process and at work, and we encourage you to apply. Visit Supporting Aboriginal People or Supporting People with Disability for more information or speak to your talent team member to arrange any adjustments to how you interact with us.
Learn more about how to apply via Our recruitment process | Transport for NSW
#LI-Hybrid