Security Regulatory Analyst

About the role

The Department of Education is seeking a Security Regulatory Analyst to support the annual Victorian Protective Data Security Standards (VPDSS) reporting program across more than 1,600 schools and education entities. This is a fixed-term role until 30 June 2028, within the Information Security Branch of the Information Management and Technology Division.

Key responsibilities

• Support the delivery of the annual VPDSS reporting program across a large and diverse education portfolio.
• Work with schools, school councils, corporate divisions, agencies and technology teams to turn regulatory requirements into practical guidance.
• Analyse compliance information and help deliver continuous improvement that strengthens information security maturity and compliance outcomes.
• Administer reporting solutions and support reporting processes.

Required profile

• Tertiary qualification in cyber security, information technology, governance, risk management, business or a related discipline.
• Certification in information security, risk management or technology governance such as CISSP, CISM or CRISC.
• Demonstrated experience supporting large-scale VPDSS reporting programs and delivering VPDSS reporting initiatives with multiple stakeholders.
• Experience developing guidance materials, communications, training resources, webinars or awareness initiatives.
• Desirable: experience interpreting regulatory requirements and controls, developing reports and dashboards, managing audits and regulatory reviews.

Required skills

• Strong understanding of information security, cyber security and the VPDSS framework.
• Advanced analytical and data interpretation skills, including identifying trends, risks and data quality issues.
• Experience administering reporting systems, including workflows, UAT, configuration management and reporting effectiveness.
• Strong stakeholder engagement and communication skills.