Our client, a leading ASX-listed infrastructure and essential services organisation, is seeking a highly experienced Business Information Security Officer (BISO) to lead cyber security, risk, compliance, and security uplift activities across its Transport sector.

This role is critical in strengthening cyber resilience and security governance across a portfolio of transport and critical infrastructure operations, ensuring alignment with regulatory obligations, contractual requirements, industry standards, and client expectations.

As the Transport BISO, you will act as the primary cyber security advisor to the business, partnering closely with executive stakeholders, operational leaders, engineering teams, and technology functions to embed security best practice across both Information Technology (IT) and Operational Technology (OT) environments.

This is a full-time permanent opportunity paying up to $250,000 package (inclusive of super).

The role will be based from either the organisation's Sydney office, operating under a hybrid model of 3 days in the office and 2 days working from home.

Key Responsibilities

• Act as the primary cyber security liaison between the Transport business and internal security, technology, engineering, operational, and client stakeholders
• Lead cyber risk identification, assessment, mitigation, and security uplift initiatives across the Transport sector
• Provide expert guidance on cyber security controls, governance, compliance, and risk management practices
• Ensure alignment with the Security of Critical Infrastructure (SOCI) Act, regulatory obligations, contractual requirements, and internal security standards
• Support the security of Operational Technology (OT) environments, including SCADA, signalling, industrial control systems, and intelligent transport systems
• Partner with operational and engineering teams to embed security-by-design principles into projects and operational environments
• Support audits, assurance activities, security reporting, incident preparedness, and resilience initiatives
• Drive continuous improvement across cyber security governance, risk management, and security culture

Performance Focus Areas
Cyber Risk & Security Uplift: Lead the identification and management of cyber risks while driving practical and sustainable security improvements across Transport operations.
Compliance & Governance: Ensure adherence to the SOCI Act, contractual obligations, internal security standards, and relevant regulatory requirements.
OT & Critical Infrastructure Security: Support the secure operation of OT environments and critical infrastructure assets through risk-based security practices and resilience initiatives.
Stakeholder Engagement: Build strong relationships across executive, operational, engineering, and technology teams to influence positive security outcomes.
Incident Readiness & Security Culture: Strengthen security awareness, preparedness, governance, and risk visibility across the sector.

About You

• Proven experience in a senior cyber security leadership role such as BISO, CISO, Cyber Security Manager, Security Lead, or equivalent
• Demonstrated experience within the transport sector or other critical infrastructure environments
• Strong understanding of cyber security governance, risk management, compliance, and security assurance
• Experience working with Operational Technology (OT) and Industrial Control Systems (ICS)
• Sound knowledge of the Security of Critical Infrastructure (SOCI) Act and critical infrastructure security obligations
• Excellent communication, stakeholder engagement, and influencing skills across executive, operational, and technical audiences
• Strong analytical, problem-solving, and risk management capabilities
• Relevant qualifications in Cyber Security, Information Technology, Engineering, or a related discipline
• Certifications such as CISSP, CISM, CRISC, or equivalent will be highly regarded
• Security clearance, or the ability to obtain one, is advantageous, so you must be an Australian Citizen to apply for this role

If you'd like to join a forward-thinking organisation where you can play a key role in protecting critical infrastructure and shaping cyber security outcomes across a nationally significant transport portfolio, please apply ASAP.