Skip to content
CISO Spotlights

Career profile

Luke Forsyth

Chief Information Security Officer, CSIRO

Security seat record: CSIRO on CISO Tribune

Status
Role as of 8 October 2026, the date of the latest source
Appointed
October 2026
Published
· Updated

By the CISO Spotlights Desk. Compiled from public records. Each statement below is drawn from the sources listed at the end.

As of October 2026, Luke Forsyth was the Chief Information Security Officer of CSIRO, Australia's national science agency, after serving as a Partner in Deloitte's cyber practice.

Career path

Before moving into cybersecurity leadership, Forsyth built more than ten years of consulting experience spanning multiple industry sectors, including government, telecommunications, financial services, commodities and manufacturing, and he holds the Certified Information Systems Security Professional (CISSP) credential.

That consulting work included risk and benefit analysis, risk management, governance, cryptography, cloud security, identity management and standards implementation, capabilities he carried into senior and leadership consulting positions over more than a decade.

He went on to become a Partner in Deloitte's Technology & Transformation practice, leading the firm's Infrastructure Security Practice in Australia from a base in Perth.

In that role he worked across many of the world's leading companies and government organisations, with extensive experience in the mining industry gained partly through secondments inside mining companies.

In his Deloitte role, he supported critical infrastructure clients such as mining companies on operational technology security and artificial intelligence security.

CSIRO appointed Forsyth as its permanent chief information security officer, drawing him from his Deloitte cyber domain partnership into the agency's security leadership.

Industry involvement and credentials

Alongside his consulting and CISO work, Forsyth has been a member of the World Economic Forum's Partnering for Cyber Resilience project, the NATO Industry Advisory Group for Cyber Defence, the Open Group's Trusted Technology Forum and several other government and industry forums.

He is a Member of the Institute for Electrical and Electronic Engineers (MIEEE) and an ISA/IEC 62443 Cybersecurity Risk Assessment Specialist, and holds degrees from Curtin University, the University of Western Australia and Cambridge University.

Sources

  1. 1.
    iTnewsitnews.com.au · undated page · checked 5 November 2026 · tier B
  2. 2.
    Deloittedeloitte.com · undated page · checked 5 November 2026 · tier A
  3. 3.
    CSAcloudsecurityalliance.org · undated page · checked 5 November 2026 · tier B

Tier A: the organization itself, a regulator or a government page. Tier B: established trade or business press.

Mondays, by email

More careers like this, every Monday

One email with the week’s new profiles, each linked to its sources.

Unsubscribe any time.