Security Regulatory Analyst

Department of Education; Melbourne; On-site; AUD 90,000 - 130,000; Full time

Job summary

The Department of Education is seeking a Security Regulatory Analyst to support the annual Victorian Protective Data Security Standards (VPDSS) reporting program across Victoria’s large education sector. The role combines regulatory compliance, data analysis and stakeholder engagement to ensure accurate reporting for more than 1,600 schools and entities.

Based in Melbourne, the role delivers guidance, workflows and continual improvement initiatives to strengthen information security maturity and

Qualifications

• Experience delivering large-scale VPDSS reporting programs across complex, distributed entities.
• Strong understanding of information security, cyber security and the VPDSS framework.
• Analytical data interpretation skills to identify trends, risks and data quality issues.
• Ability to translate regulatory requirements into practical guidance and reporting processes.
• Experience coordinating with schools, councils, divisions and technology teams to ensure timely compliance.

Responsibilities

• Support the delivery of the VPDSS reporting program across 1,600+ schools and entities.
• Analyse compliance data and produce actionable insights for governance and improvement.
• Develop and deliver guidance materials, trainings and communications to boost participation and compliance.
• Contribute to audits and regulatory reviews as required.

Skills

VPDSS reporting

Information security

Regulatory compliance

Stakeholder engagement

Data analysis

Reporting systems

Guidance materials/training

Communication skills

Education

Tertiary qualification in cyber security / IT / governance / risk management

Certifications such as CISSP / CISM / CRISC

Tools

Reporting systems platforms

Job description

Location: Melbourne - CBD and Inner Metro suburbs

Reference: VG/DE/FPIS/1956308

Seeking a Security Regulatory Analyst to support the delivery of the annual Victorian Protective Data Security Standards (VPDSS) reporting program across one of Victoria's largest and most complex public sector environments.

Help strengthen cyber security compliance across Victoria's education sector

Are you an analytical and stakeholder-focused professional with experience in regulatory compliance, reporting and information security governance?

The Department of Education is seeking a Security Regulatory Analyst to support the delivery of the annual Victorian Protective Data Security Standards (VPDSS) reporting program across one of Victoria's largest and most complex public sector environments. Working across a diverse portfolio of more than 1,600 schools and education entities, you will play a key role in helping the department meet its information security regulatory obligations and support the protection of sensitive information across the Victorian education system.

About Us

The Information Management and Technology Division (IMTD) supports one of the largest technology environments in Victoria, serving more than 1,600 government schools, Early Learning Education, approximately 50,000 teachers and 650,000 students. The division delivers secure, reliable and innovative digital services that enable educational excellence across the state.

The Information Security Branch plays a critical role in safeguarding the department's information assets and providing assurance to executive leadership, government and regulators that strategic information security risks are effectively managed.

About the Role

This is a Fixed Term role until 30 June 2028.

The Security Regulatory Analyst supports the delivery of the department's annual Victorian Protective Data Security Standards (VPDSS) reporting program across a large and diverse education portfolio. The role combines regulatory compliance, stakeholder engagement, data analysis and reporting solution administration to ensure accurate and timely compliance reporting across more than 1,600 schools and education entities.

Working closely with schools, school councils, corporate divisions, agencies and technology teams, you will support reporting processes to translate regulatory requirements into practical guidance, analyse compliance information, and contribute to continuous improvement initiatives that strengthen information security maturity and regulatory compliance outcomes.

What We're Looking For

We're seeking an experience security analyst who combines strong analytical capability with excellent stakeholder engagement skills and a passion for regulatory compliance and information security.

You will bring:

• Demonstrated experience supporting large-scale VPDSS reporting programs across complex and distributed entities.
• Strong understanding of information security, cyber security and the VPDSS framework and obligations.
• Strong analyst capabilities with experience in analysing and synthesising compliance data to identify trends, risks, data quality issues and opportunities for improvement.

• Proven ability to engage and influence diverse stakeholders through effective communications, guidance and education initiatives that drive participation, capability uplift and compliance outcomes.

• Experience supporting and administering reporting systems including workflows and business processes, solution enhancements, user acceptance testing, configuration management, usability and reporting effectiveness.

About You

To be successful in this role, you will bring:

Essential

• Relevant tertiary qualifications in cyber security, information technology, governance, risk management, business or a related discipline.
• Certifications in information security, risk management or technology governance such as CISSP, CISM or CRISC.
• Demonstr ated experience supporting the delivery of VPDSS reporting initiatives involving multiple stakeholders and competing priorities.
• Advanced analytical and data interpretation skills.
• Demonstrated experience developing guidance materials, communications, training resources, webinars or awareness initiatives that improve stakeholder capability and compliance outcomes.
• Strong stakeholder engagement and communication skills, with the ability to work effectively across diverse stakeholder groups.

Desirable

• Experience interpreting regulatory requirements, information security controls and compliance frameworks, including VPDSS.
• Experience developing reports, dashboards, performance metrics and compliance insights for operational and management audiences.
• Strong organisational skills with the ability to manage deadlines, monitor progress and ensure quality outcomes.
• Experience supporting audits, regulatory reviews and compliance activities.

Further Information

For more details regarding this position please see attached position description.

The department values diversity and inclusion in all forms - gender, religion, ethnicity, LGBTIQ+, disability and neurodiversity. Aboriginal and Torres Strait Islander candidates are strongly encouraged to apply. For more information about our work, working for the Department, diversity and inclusion, and our employment conditions visit the Department website and our Diversity and Inclusion page

Applicants requiring adjustments can contact the nominated contact person.

Information about the Department of Education's operations and employment conditions can be located at www.education.vic.gov.au .

For further information pertaining to the role, please contact Allison Thaddeus via email [e-mail]

Preferred applicants may be required to complete a police check and may be subject to other pre-employment checks. Information provided to the Department of Education will be treated in the strictest confidence.

Please let us know via phone or email if you require any adjustments to ensure your full participation in the recruitment process or if you need the ad or any attachments in an accessible format (e.g large print) due to any viewing difficulties or other accessibility requirements.

Applications close Thursday 19 November 2026 at 11.59pm