About us

The NSW Police Force (NSWPF) is one of the largest police forces in the western world, with more than 20,000 employees, including more than 4,000 administrative employees who support the sworn officers that provide a range of law and order services 24 hours a day, seven days a week to the socially, geographically and culturally diverse community of NSW.

About the role

We have an opportunity for a Product Owner - User Security to be part of our Network & Security Platform Services, Technology & Communication Services Command. The Product Owner - User Security is responsible for leading a team of Security Administrators in providing user authentication and access control administration and auditing across the diverse platforms which make up the NSW Police Information systems.

Roles and responsibilities of the Product Owner: 

Identity Governance and Access Management

• Own and manage automated identity governance and control processes, leveraging SAP feeds and organisational hierarchy to ensure accurate provisioning and deprovisioning of user access. 
• Define and enforce access provisioning policies in coordination with internal business units. 
• Deliver and support Single Sign-On (SSO) solutions for internal web applications and LDAP-based environments. 

• Manage and support external identity federations using SSO and SAML-based authentication protocols. 

   

Certificate and Cryptographic Services 

• Manage the internal Certificate Authority (CA), including lifecycle management, approval, issuance, renewal, and revocation of digital certificates. 
• Oversee external certificate management services, including the transition from Entrust to DigiCert, ensuring continuity, compliance, and operational integrity. 
• Ensure certificate services meet organisational security, compliance, and audit requirements. 

Mainframe and Enterprise Systems Access Control 

• Manage RACF services, providing role-based access control (RBAC) for developers, police officers, and external agencies. 
• Oversee profile creation, association, review, and deprovisioning, including the removal of redundant and revoked access. 
• Manage library associations and secure access for system programmers, operators, and developers. 
• Administer Adabas/Natural access controls, including authorised personnel access, started tasks, automation profiles, Natural group access, and multi-level dataset permissions. 
• Ensure ongoing system maintenance, auditing, and compliance across mainframe environments. 

Authentication, API, and Privileged Access Platforms

• Deliver and manage Multi-Factor Authentication (MFA) services using OneSpan, supporting NSWPF staff, external agencies, IT vendors, and RADIUS-enabled applications with hardware and software tokens. 
• Manage Layer 7 API Gateway services, including OAuth authentication, Mobile API Gateway (MAG), One-Time Tokens (OTK), and application level authorisation. 
• Oversee Privileged Access Management (PAM) solutions to ensure secure access to privileged accounts, systems, and servers in accordance with least-privilege principles.

Audit, Compliance, and Reporting 

• Provide logon and logoff audit reporting to Professional Standards Command (PSC) and external agencies, including COP audits. \Deliver monthly and quarterly audit reports covering: 
  • User access and termination reviews 
  • Privileged access (including Desktop Administrators and Local PC Administrators) 
  • RACF access reviews and mainframe access revocations 
• Ensure IAM services meet NSWPF audit, governance, and compliance obligations

What we can offer you

At NSWPF our people have access to a range of benefits that help balance life at work and at home. Some of the benefits available when you join the NSWPF include:

• competitive salary;
• flexible work options;
• opportunity to purchase leave;
• annual leave loading;
• corporate wellbeing programs including seminars and the Fitness Passport;
• free annual influenza vaccination;
• salary packaging options via superannuation contributions or a novated vehicle lease;
• convenient location for public transport and to shops etc; and
• in-house gym facilities.