About this role
Job Description
This role will focus on two primary areas:
Cyber Security Incident Response (CSIR): Enhancing program maturity, strengthening governance, and supporting the coordination of day-to-day cyber security incidents across the Agency and the health sector. A strong emphasis will be placed on communication, stakeholder engagement (including external audiences), and high-quality reporting, along with the development of procedures, policies, and standards.
Zero Trust Implementation: Supporting the hands-on implementation and operationalization of Zero Trust principles and technologies across the enterprise. This includes assessing current security architecture, identifying gaps in identity, access, and network security controls, and working closely with Cyber Security Defence(CSD), Information Security Office (ISO), and operational teams to implement practical, integrated solutions.
This role is not deeply technical (e.g., digital forensics), but requires a strong background and hands-on in CSIRT/Security Operations and Zero Trust implementation to ensure delivery of real, measurable outcomes and an operational Zero Trust model.
This engagement sits within Agency?s broader AI-Driven Risk Program and mitigation plan, established in response to the rapid rise of adversarial AI capabilities that are increasing the volume, speed, and complexity of cyber attacks across the health sector. The plan is being executed through serval workstreams spanning ? Prevent & Reduce Exposure,? ? Detect, Contain & Respond,? and ? Outpace the Adversary.? While this role is focused primarily on Cyber Security Incident Response and Zero Trust implementation, the resource is expected to align their work to, and support the relevant workstreams ? recognizing that Zero Trust and incident response are central enablers of the organization?s ability to defend at machine speed.
Responsibilities
CSIRT (Cyber Security Incident Response Team)
Lead program maturity initiatives, including
- Developing and maintaining incident response procedures, playbooks, policies, and standards
- Establishing and improving incident response governance, processes, and workflows
- Defining KPIs, metrics, and reporting for program effectiveness
- Supporting tabletop exercises and simulation activities
Collaborate with stakeholders across the Agency and the health sector to:
- Support coordinated incident response and communication
- Provide advisory support during sector-wide cyber incidents
- Promote cyber resilience and standardized security practices
- Support incident response readiness for AI-accelerated / machine-speed threats, including faster containment and ?breach vs. break? decision playbooks
Support and enhance the Cyber Security Incident Response program, including:
- Coordinating cyber incident response activities across internal teams and external stakeholders
- Acting as a key point of contact for incident communications, including e