Title:  Chief Security Officer

Job Description:

The L3Harris Communications Australia (L3HCA) Chief Security Officer (CSO) acts as a strategic, trusted and confidential partner to their client group by embedding security related strategies into day-to-day work and providing professional guidance and support to relevant internal client groups with the objective of adding value to the business. The L3HCA CSO will work closely with Leadership, Management, Information Security and Staff to establish, implement, nurture and oversee policies and programs by providing counsel and assistance in all security related matters, including facilitating organisation and leadership development efforts as well as investigating root causes and identifying corrective actions for security-related matters. The L3HCA CSO is responsible for driving a strong security culture, managing security risks, overseeing incident response and investigations, and ensuring compliance with the Protective Security Policy Framework (PSPF), Defence Industry Security Program (DISP) requirements, and relevant L3Harris corporate policies.

This role leads and directs experienced professionals, lower-level supervisors and/or associate managers. The L3HCA CSO will communicate within and outside of the organisation to explain and influence changes to policies, practices, and/or approaches. The L3HCA CSO will lead and make (where required) significant improvements in processes, systems, and/or products. They will be expected to establish short-term operational plans with measurable contribution to function or business area results. The role requires strong leadership capability, sound judgement, and extensive knowledge of industrial security practices within the Australian Defence environment.

Essential Functions:

• Lead implementation and ongoing compliance with the Protective Security Policy Framework (PSPF) and other applicable Australian Government security requirements.
• Effectively set the strategic direction for the entity’s protective security planning and risk management and integrate security into the entity’s risk and business processes and decisions, including the management and implementation of security policies, procedures, site specific risk assessments and standard operating procedures
• Lead and oversee the organisation’s Insider Threat Program, ensuring alignment with corporate and government policy requirements.
• Realise optimal security maturity through clear understanding of vulnerabilities, decisions and future plans.
• Manage the entity’s response to security-related crises, manage security performance to achieve required protections, manage incidents and emergencies and establish monitoring mechanisms across the entity
• Domestic Travel – 10% - Potential for international travel
• Requires Australian citizenship with NV2 security clearance
• Partner with the L3HCA Chief Information and Security officer (CISO) to identify and manage cyber threats
• Work closely with the L3HCA Business Continuity and Business Resilience teams to provide industrial and cyber security guidance

Qualifications:

• NV2 security clearance required day 1

• Minimum of 7+ years’ strategic Manager, Security or Chief Security Officer experience.

• Demonstrated knowledge and understanding of Australian Government Security policies and procedures and any other authoritative sources, including the Defence Security Policy Framework (DSPF) and Information Security Manual (ISM)
• Knowledge, seniority and authority to coordinate and administer the day-to-day security function within a Defence Industry Security Program (DISP) entity
• Strong ICT/Cyber awareness

Preferred Additional Skills:

• Previous experience managing secure facilities / industrial security program
• Ability to effectively handle demanding and challenging situations.
• Ability to work in a fast-paced environment with continuous change
• Demonstrate strong consulting, interpersonal, and negotiation skills
• Ability to develop strong trusting relationships in order to gain support and achieve results.

• Excellent oral and written communication skills
• Ability to accurately identify and define key risks
• Previous cyber security experience
• Previous industrial and cyber security engagements with government agencies such as ASIO and the Defence Cyber and Information Assurance Branch (DCIAB)