We are searching for an experienced Project Officer, Information Security at the **State Library of NSW**:
**Project Officer, Information Security, Clerk Grade 5/6**
**Digital Experience Division - Information Systems & Records Management Branch**
- Temporary, full-time opportunity for a period of up to two years with the possibility of extension
- Flexible working conditions
- Competitive remuneration package up to $107,497 (package includes salary between $87,493 - $96,540 p.a., plus employer's contribution to superannuation and annual leave loading)
**About the State Library**
The State Library of New South Wales is one of Australia's oldest and most important public institutions. Collecting actively since 1826, the Library preserves and presents the social, cultural and scientific history of our State and our Nation for the benefit of all. Its rich collections, both physical and digital, alongside partnerships with the public library network across NSW and other vibrant collaborations enable Australians to examine their past and imagine their future. In short, the Library occupies a unique position at the very heart of our civil society.
The Digital Experience Division leads and manages the Library's digital environment and Information and Communications Technologies (ICTS) to deliver clients and staff the best available and consistent digital experience. By partnering with business for innovation and providing high-quality digital products and services, the Division drives the State Library's commitment to digital excellence. The Division's key branches are Information Systems & Records Management; Digital Library Systems & Services; ICT Services; and Digitisation.
The Information Security & Records Management branch supports the Library's information management practice by ensuring information and cyber security compliance, providing record keeping?services and improving the efficient use of information assets through technology and digital workflows.
**About the role**:
We are currently seeking a Project Officer, Information Security, who will be responsible for providing administrative support for the Library's Information Security Management System (ISMS) and cyber and information security practice, achieving annual work plan objectives, and complying with legislation and policies.
**The key accountabilities of this role include**:
- Coordinating and managing information security governance documentation to support the Library's Information Security Management System (ISMS)
- Implementing the staff cyber awareness and training programs
- Drafting regular reports to Executive, Audit and Risk Committee, Cyber Security NSW, and external government bodies
- Supporting the Library's Cyber Security Incident Response team including response, recording, resolution, and post-incident analysis to ensure deficiencies are identified, and learnings are documented
- Providing a range of administrative services to support the Library's cyber security program of work
- Coordinating the annual audit process, including gathering, collating information, and preparing the documentation required for the auditors
**About you**:
To be successful in this role, you will have the following knowledge and experience:
- You are interested in working in cyber security but not necessarily in a hands on technical role.
- You are a good communicator and who is proficient at communicating with both technical and non-technical audiences and ensuring clear understanding of cyber security concepts are understood by both parties.
- You have knowledge of current NSW Cyber Security Policy and practice and an Information Security Management System (ISMS) framework and what the Library needs to do to meet our cyber security compliance requirements.
- You are experienced in using Microsoft Teams and SharePoint to support collaborative work practices of a busy working group whose members have other responsibilities.
**How to apply**:
Please submit an up-to-date CV and a cover letter (no more than two pages) outlining how you meet the requirements and key accountabilities of this role and provide answers to the 2 pre-screening questions below:
1. What is the purpose of having a cyber-security risk register? What types of information should the register include?
2. Please detail your experience with using Microsoft Teams and SharePoint in the workplace and provide an example of which Teams functionalities you have used to support the work of a project team or committee.
Subject to current health orders, assessments may be administered online. If you require any adjustments, you may request these should you be shortlisted.
The health and wellbeing of staff and visitors to our Library is very important to us. We expect all parties to follow current health advice and the Library expects all applicants who can be safely vaccinated for COVID 19, to be so.
**Talent Pool**:
***
Applicants not initially offered a role b