The Queensland Building and Construction Commission (QBCC) is seeking a highly skilled Senior Cybersecurity Engineer to play a vital role in protecting our information and technology assets. In this pivotal role, you’ll drive the implementation and continuous improvement of QBCC’s Cyber Security Strategy, lead complex problem-solving initiatives, and support critical projects that strengthen our cybersecurity resilience. You'll collaborate with internal and external stakeholders to ensure alignment with our Information Security Management System (ISMS) and broader GRC (Governance, Risk, and Compliance) frameworks. If you're passionate about proactive risk management, delivering secure solutions, and shaping the future of cybersecurity in a high-impact environment — we want to hear from you.

Job details

The position is based in Brisbane, and the successful candidate will have the option to work from home under an approved Flexible Work Arrangement.

Key Outcomes and Accountabilities

• Cybersecurity Strategy Support:
  • Lead in implementing and supporting the QBCC Cyber Security Strategy and associated cybersecurity policies aligned with organisational objectives and regulatory requirements.
  • Conduct complex problem-solving analyses and vulnerability assessments to identify potential security threats and recommend strategic and operational mitigation measures.
• Security Architecture and Design:
  • Design and implement security architecture for information systems, ensuring all technology solutions incorporate high-level security measures.
  • Support the Cyber Security Roadmap through evaluation and recommending security technologies and tools that enhance the organisation's cybersecurity capabilities.

Please refer to the Position Description for further Key Outcomes and Accountabilities and full list of Candidate Attributes.

Candidate Attributes 

1. Educational Background:
   • A bachelor's degree in computer science, Information Technology, Cybersecurity, or a related field. Relevant certifications (e.g., CISSP, CISM, CEH) are highly desirable.
2. Experience:
   • A minimum of 2 years of experience in cybersecurity roles, with a strong focus on security engineering, incident response, and risk management.
   • Proven experience in leading complex projects and managing teams in a cybersecurity context, with a strong understanding of ISMS/Cyber frameworks.
3. Technical Skills:
   • In-depth knowledge of cybersecurity technologies, tools, and best practices, including firewalls, intrusion detection/prevention systems, and endpoint protection.
   • Proficient in security assessment methodologies, vulnerability management, and threat intelligence.

How to Apply (via Smart Jobs only)

Please submit a current resume and a brief letter (maximum 2 pages) outlining how your skills, knowledge and experience compliment the Candidate Attributes in the Position Description. It is your opportunity to tell us how you meet the required competencies, key outcomes/accountabilities and any specific role requirements.

Further information

We are committed to building inclusive cultures in the Queensland public sector that respect and promote human rights and diversity.

Unsolicited resumes from recruitment agencies will not be accepted. By providing the names and contact details of your referee/s you consent for these people to be contacted by the selection panel.

Documents

Before applying for this vacancy please ensure you read the documents below.

• QBCC Information for Applicants - May 2025 (PDF, 531KB)
  Information Package for Applicants
  
  Senior Cybersecurity Engineer AO7 Position Description (PDF, 797KB)
  Role Description