Who we are

In Melbourne, water is essential to our way of life.

As caretakers for Melbourne’s water cycle, we care for water, life, and land throughout Melbourne: both its people and its biodiversity.

Each time you drink from the tap, flush a toilet, run through a backyard sprinkler, or kayak down the Yarra we’re there. Primed and ready, quietly delivering some of the world’s cleanest water for over five million residents and wildlife that call Melbourne home, just as we have for over 130 years.

If you value making it count, diving in with curiosity, and doing what’s right, you're in the right place.

About the Role

Reporting to Fiona Cullen, Senior Manager Identity & Access Management this is a pivotal role within the Information Security Team. As the Identity & Access Management Specialist  you will be responsible for ensuring Melbourne Water’s identity services and access controls protect the business, whilst ensuring that the right access is granted to the right users and systems at the right time across all aspects of digital technology.

• Provide expert (SME) advice and guidance to our customers and partners to realise value in cybersecurity and build trusted advisor relationships with key business stakeholders and sponsors.
• Lead and develop processes and enhancements for enterprise-wide identity security functions such as identity lifecycle management & governance, privileged access management, customer & partner identity, authentication controls, incident management and investigation.
• Ensure delivery of operational day-to-day services to the business and various stakeholders to meet cybersecurity policy obligations.
• Continuously improve and ensure governance for user access to strengthen and optimise identity, access, and privileged access management across the organisation for human and machine identities, empowering the business to achieve its strategic goals
• Support the uplift of relevant control domains maturity as measured by National Institute of Standards and Technology (NIST) cybersecurity framework for both IT and OT, the Australian Signals Directorate (ASD) Essential 8, and other frameworks as required.
• Support the assessment of Melbourne Water’s compliance with the Victorian Protective Data Security Framework (VPDSF) and other frameworks as required in relation to identity & access management, supporting attestations (e.g. OVPDP)
• Develop education and training material to support IDAM portfolio change initiatives, education, and awareness across the business.

For further information please refer to the attached  Role Mandate

About you:

• Extensive experience and technical subject matter expertise in identity & access management & governance.
• Extensive experience and subject matter expertise in multiple identity & access management and information security platforms.
• Experience in multiple major programs for identity & access management.
• Previous experience in incident management response and reporting.
• Strong understanding of privileged access management concepts and experience in PAM technologies
• Demonstrated experience leading and promoting appropriate cybersecurity awareness, culture, and behaviours across an organisation at all levels for identity & access management.
• In-depth understanding of and experience in various IDAM capabilities, including user lifecycle management, access governance, directory services, RBAC and ABAC identity provisioning models, privileged access management, multi-factor authentication and single sign-on, conditional access.
• Strong stakeholder engagement

Security qualifications, accreditations, and current certification in, for example, CISSP, CISM, CISA, ISO27001 LA and/or CRISC are highly desirable.

Why join us:

At Melbourne Water, we care deeply about water and the life it sustains. 

Our team is inspired by passion and purpose, with an unwavering commitment to safety. We are on a mission to protect every Melburnian’s way of life, one drop at a time.

We don’t just talk about flexible working - we live it. Our culture of purpose, safety, results, and learning flows through everything we do. We're dedicated to doing what's right, and this commitment extends to the meaningful work we do in a supportive and inclusive culture that encourages you to make the most of your talents.

Our long-standing commitment to Diversity, Inclusion, and Belonging means that Aboriginal and Torres Strait Islander peoples, LGBTIQ+ individuals, people living with disability, mature age and young jobseekers from all cultures can apply with confidence knowing they are safe, affirmed, and celebrated.

If you’re curious, action-orientated, outcomes-focused, and passionate about public resources, community, and the environment, we'd love to receive your application and learn if you could be a great fit. 

How to Apply

Click the 'Apply Now' button below and complete our online application form.

Closing date: Wednesday 24th September 2025 at 11:55pm AEST

As an operator of critical infrastructure, Melbourne Water is required to determine what roles are critical under the Security of Critical Infrastructure (SoCI) Act 2018. The role you are being offered is deemed SOCI critical, you will be required to undertake an AusCheck background check. Your commencement in a SOCI critical role will be dependent on successfully submitting an AusCheck application and attending an in-person ID Verification with a member of the Melbourne Water People & Transformation team. Your probation will be dependent on the satisfactory outcome of a background check via AusCheck.

The AusCheck process is outlined clearly in this presentation provided by AusCheck CI Critical Worker: Getting Started Guide | Rise 360 (articulate.com). Details on obtaining an AusCheck background check will be provided by Melbourne Water People & Transformation Team prior to the commencement of your employment.