Introduction
This guide walks through the application task for the Information Security Program Lead role with Cancer Institute (NSW) in Sydney – North/North West. Lead the Cancer Institute NSW information security governance, risk and compliance program across frameworks, controls, architecture advice and cyber risk improvement.
Use this checklist when planning how to apply for Information Security Program Lead. View the official job ad while you prepare so your documents stay aligned with the current instructions.
NSW Government applications are assessed against both the submission instructions and the role requirements. Submit the requested documents in the correct format and support your claims with specific evidence.
Information Security Program Lead role snapshot
| Role | Information Security Program Lead |
|---|---|
| Organisation | Cancer Institute (NSW) |
| Location | Sydney – North/North West |
| Employment | Permanent Full-Time |
| Salary or grade | $153,559 to $182,954 per year, plus 12% superannuation |
| Job ID | 602501 |
| Closing date | Applications close 11:59 pm, Sunday 11 October 2026 |
| Official vacancy | View the official job ad |
NSW Government application requirements
Application requirements are used to screen submissions for compliance. Follow every document, page and word limit shown below and recheck the application form before submitting.
Application requirements for Information Security Program Lead
- Resume, maximum 5 pages
- Covering letter addressing the Essential Requirements in the Role Description
- Responses to 3 pre-screening questions in the application
Essential role requirements
- Current Australian working rights; eligibility for the permanent appointment is assessed against citizenship, residency or visa conditions
Candidate evidence for Information Security Program Lead
Choose evidence that matches the practical work and level of responsibility. Make your own decisions, actions and results easy for the panel to assess.
| Evidence area | How to demonstrate it |
|---|---|
| Security governance, risk and compliance | Leadership of an information security management system, ISO 27001 certification, audit preparation or audit response. |
| Frameworks and controls | Security policies, standards and processes aligned with ISO 27001, NIST, Essential Eight or government requirements. |
| Technical security breadth | Credible work across identity, networks, applications, data protection, cloud, architecture or security operations. |
| Risk assessment and influence | How you assessed cyber risk, gained stakeholder support and converted findings into measurable improvements. |
Example application structure for Information Security Program Lead
- Opening: establish your relevant setting, level of responsibility and reason for applying.
- Primary evidence: use your strongest example, including the problem, your decisions and the result.
- Supporting evidence: add a different example that shows how you worked with others or managed risk.
- Closing: connect your evidence to the organisation and confirm any eligibility or work-arrangement points.
Targeted or pre-screening questions
- Information security programs often involve more coordination and influence than technical work. Describe an initiative you led where success depended on gaining support from multiple stakeholders with different priorities. Explain: How you obtained buy-in; what resistance you encountered; how you measured progress; and what you learned about leadership from the experience.
- Audits and assurance reviews do not always go to plan. Describe the most challenging audit, review or assurance activity you have been involved in and explain: Why it became challenging; where you disagreed with auditors, stakeholders or management; how you worked through those challenges; and what you would do differently if faced with the same situation again.
- In your experience, where do organisations most commonly fail when implementing security, risk or compliance frameworks? Describe an example you have personally encountered, how you identified the issue, and what you did to improve the outcome.
Before you submit
Check that every requested document and response is present, within its limit and easy to match to the role. Verify names, dates and figures, then return to the official vacancy for the final portal check.
Help with your Information Security Program Lead application
If you want support shaping your genuine evidence and document structure, request application help from Team 3Thirty.