Help strengthen cyber security compliance across Victoria's education sector

Are you an analytical and stakeholder-focused professional with experience in regulatory compliance, reporting and information security governance?

The Department of Education is seeking a Security Regulatory Analyst to support the delivery of the annual Victorian Protective Data Security Standards (VPDSS) reporting program across one of Victoria's largest and most complex public sector environments. Working across a diverse portfolio of more than 1,600 schools and education entities, you will play a key role in helping the department meet its information security regulatory obligations and support the protection of sensitive information across the Victorian education system.

About Us

The Information Management and Technology Division (IMTD) supports one of the largest technology environments in Victoria, serving more than 1,600 government schools, Early Learning Education, approximately 50,000 teachers and 650,000 students. The division delivers secure, reliable and innovative digital services that enable educational excellence across the state.

The Information Security Branch plays a critical role in safeguarding the department's information assets and providing assurance to executive leadership, government and regulators that strategic information security risks are effectively managed.

About the Role

This is a Fixed Term role until 30 June 2028. 

The Security Regulatory Analyst supports the delivery of the department's annual Victorian Protective Data Security Standards (VPDSS) reporting program across a large and diverse education portfolio. The role combines regulatory compliance, stakeholder engagement, data analysis and reporting solution administration to ensure accurate and timely compliance reporting across more than 1,600 schools and education entities.

Working closely with schools, school councils, corporate divisions, agencies and technology teams, you will support reporting processes to translate regulatory requirements into practical guidance, analyse compliance information, and contribute to continuous improvement initiatives that strengthen information security maturity and regulatory compliance outcomes.

What We're Looking For

We're seeking an experience security analyst who combines strong analytical capability with excellent stakeholder engagement skills and a passion for regulatory compliance and information security.

You will bring:

• Demonstrated experience supporting large-scale VPDSS reporting programs across complex and distributed entities.
• Strong understanding of information security, cyber security and the VPDSS framework and obligations.
• Strong analyst capabilities with experience in analysing and synthesising compliance data to identify trends, risks, data quality issues and opportunities for improvement.

• Proven ability to engage and influence diverse stakeholders through effective communications, guidance and education initiatives that drive participation, capability uplift and compliance outcomes.

• Experience supporting and administering reporting systems including workflows and business processes, solution enhancements, user acceptance testing, configuration management, usability and reporting effectiveness.

About You

To be successful in this role, you will bring:

Essential

• Relevant tertiary qualifications in cyber security, information technology, governance, risk management, business or a related discipline.
• Certifications in information security, risk management or technology governance such as CISSP, CISM or CRISC.
• Demonstrated experience supporting the delivery of VPDSS reporting initiatives involving multiple stakeholders and competing priorities.
• Advanced analytical and data interpretation skills.
• Demonstrated experience developing guidance materials, communications, training resources, webinars or awareness initiatives that improve stakeholder capability and compliance outcomes.
• Strong stakeholder engagement and communication skills, with the ability to work effectively across diverse stakeholder groups.

Desirable

• Experience interpreting regulatory requirements, information security controls and compliance frameworks, including VPDSS.
• Experience developing reports, dashboards, performance metrics and compliance insights for operational and management audiences.
• Strong organisational skills with the ability to manage deadlines, monitor progress and ensure quality outcomes.
• Experience supporting audits, regulatory reviews and compliance activities.

Further Information

For more details regarding this position please see attached position description.

The department values diversity and inclusion in all forms - gender, religion, ethnicity, LGBTIQ+, disability and neurodiversity. Aboriginal and Torres Strait Islander candidates are strongly encouraged to apply. For more information about our work, working for the Department, diversity and inclusion, and our employment conditions visit the Department website and our Diversity and Inclusion page

Applicants requiring adjustments can contact the nominated contact person.

Information about the Department of Education's operations and employment conditions can be located at www.education.vic.gov.au.

For further information pertaining to the role, please contact Allison Thaddeus via email allison.thaddeus@education.vic.gov.au

Preferred applicants may be required to complete a police check and may be subject to other pre-employment checks. Information provided to the Department of Education will be treated in the strictest confidence.

Please let us know via phone or email if you require any adjustments to ensure your full participation in the recruitment process or if you need the ad or any attachments in an accessible format (e.g large print) due to any viewing difficulties or other accessibility requirements.

Applications close 11:59pm on Thursday, 19 November 2026